Hi,

I gave your code snippet a try (without the BR and CODE tags) but I got an internal server error when trying to access the site.

I found the following code on a Windows support forum that seems to work. Can you see anything in it that I might want to tweak?

<rewrite>
<rules>
<rule name="Redirect to http" enabled="true" patternSyntax="Wildcard" stopProcessing="true">
<match url="*" negate="false" />
<conditions logicalGrouping="MatchAny">
<add input="{HTTPS}" pattern="off" />
</conditions>
<action type="Redirect" url="https://{HTTP_HOST}{REQUEST_URI}" redirectType="Found" />
</rule>
</rules>
</rewrite>

Thanks again.

I had a look at the link you provided and have a few questions (if you don't mind ;-)

1. In the code illustrated in the article, within the Rules statement the Match statement is closed -- whereas your use includes Conditions / Add / Action within the Match statement. Are both uses acceptable?

2. And how about the OutboundRules section -- should it be included?

3. I also read through the comments and the last one listed noted "...redirecting a user to the secure version of a site is vulnerable to a man in the middle attack since the first request is unsecure and the attacker can redirect them to a malicious site." Does that sound like a reasonable concern?

Thanks again.

Jim