%>

This worked fantastic... and if a DNN site had a SSL certificate, then this instantly placed the entire site and any pages accessed by the user from http://www.mywebsite.com/mypage.aspx to SSL site of https://www.mywebsite.com/mypage.aspx

However after a recent upgrade from 5.x to 6.x we discovered that we had to change our redirect code on line 4 inside the dnn default.aspx file to the following to comply with C# language syntax:
<%
    if (Request.ServerVariables["HTTPS"].Equals("off")) {
        Response.Redirect("https://" + Request.ServerVariables["HTTP_HOST"] + "/default.aspx");
    }
%>

Again this works by redirecting the entire site as SSL "AS LONG AS WE HAVE THE SSL CHECK BOX ENABLED" in the Admin Site Settings.
This forces all the pages to SSL with out us having to go to each page settings and checking the page as SSL.

The only issue is that a strange text is displayed in the DNN Login Popup Modal which says "lang="en-US"" displayed above the Username:
Would love to attach or send someone a screenshot if i could. As thats the only perplexing thing about making entire DNN site SSL with out having to go to each page and set the SLL page.

So My QUESTION: Is the below HTTPS redirect approach correct in regards to DotNetNuke:
<%
    if (Request.ServerVariables["HTTPS"].Equals("off")) {
        Response.Redirect("https://" + Request.ServerVariables["HTTP_HOST"] + "/default.aspx");
    }
%>
"IS" this the  best way so far to force all the DNN 6.x-7.x pages to SSL without having to check each page at a time as SSL?
(again the only glitch in the Login Popup modal the strange("lang="en-US"" displayed above the Username:)

Try the above re-direct code on your ssl DNN test box with only SSL enabled in your admin settings on Versions 6.x and greater and you'll see what it does. all pages instantly redirect to https.

Please let me know how everyone else is forcing the entire DNN site as SSL?

Hope my explaining this issue wasn't too complicated... simply put,  i'm just looking for the best way to make sure all pages redirect and display as https: without my having to go to each page settings>Advanced Settings>Other Settings and checking the "SECURED?" Check box.
Please advise "in detail" on a better way that has worked for you in your case.

The way I usually force SSL on any ASP.NET website (even non DNN sites) is to add the following to your web.config:

<rule name="HTTP to HTTPS redirect" stopProcessing="true">
  <match url="(.*)" />
    <conditions>
      <add input="{HTTPS}" pattern="off" ignoreCase="true" />
    </conditions>
  <action type="Redirect" redirectType="Found" url="https://{HTTP_HOST}/{R:1}" />
</rule>

found it here:
http://www.iis-aid.com/articles/how_t...

You could also go to the host -> SQL page and just execute an SQL statement that changes IsSecure = 1 in the Tabs table... That will just change all your existing pages to be secure. Then you can just mark them that way in the future.

Mike