0

Minor Blog Update – now HTTPS by default!

This Sunday I set out to force my blog hosted on Azure to be Https by Default and I mainly made use of the following Article by Troy Hunt on the underlying implementation which makes use of Cloudflare but I’ve also decided to get it set up ready for if I may want to move away from CloudFlare to Azure CDN in future.

 

There really isn’t to difficult to do this especially if you follow Troy’s post. It is something that can be completed in a manner of hours and best of all it is a free service from Cloudflare to enforce HTTPS and you get the power of a CDN built in too.

 

This means that the core items of my blog site load much quicker than they used to which is good for everyone that visits in future.

 

There are a few little amendments that you need to do on the Azure WebSite side with the Web.Config file but with it being an addition as simple as below I’m sure that it wont be something that trips people up in future

 

<rule name=”Force HTTPS” enabled=”true”>
          <match url=”(.*)” ignoreCase=”false” />
          <conditions>
            <add input=”{HTTPS}” pattern=”off” />
          </conditions>
          <action type=”Redirect” url=”https://{HTTP_HOST}/{R:1}” appendQueryString=”true” redirectType=”Permanent” />
        </rule>

 

You do need to also get your own SSL Certificate if you are using your own Domain name as by default there is a Wildcard SSL cert for the azurewebsites.net domain and I decided to go with DigiCert – http://digicert.com/ – for this as opposed to the Cloudflare cert that you could go with.

 

Hopefully now my blog will load a little quicker for you all Smile

Leave a Reply