Does Changing From http to https result into redirects?

Replies

• 

  Rahul Jamgade

  The_Big_K

  CEans,
  
  I'm currently exploring the possibilities of having the whole site work on https than on http. But my knowledge of the secured http is very limited. If we make a move from http to https; will all our URLs need to be redirected?

  It is not necessary that traffic has to be redirected explicitly as a part of http to https. If you consider in a corporate website or any large usage site than the https is stripped off and the entire traffic to the web server travels in http mode. This process of receiving https traffic and passing http to the web servers is known as https stripping. This is done so as to offload the web server or application server from the high resource intensive process of decrypting of https into http. Hence web server can work in more efficient way.
  It depends on the ISP / Service Hosting (Service provider), if they can provide https stripping services by external devices at their end. However we also need to make sure that they provide sufficient security with the ssl stripper way.
  
  It is important that complete https traffic for website can degrade the overall performance and response. Of course depends on agreement wit hthe service provider.
• 

  Kaustubh Katdare

  @Rahuljam: I'm aware that https may have a negative effect on the web server. What I actually want to know is that if we switch over to https; will the URLs starting with HTTP automatically start loading HTTPs or will I have to setup 301 redirects in place?
  
  Thank you for the information about ssl stripping.