The project is ASP.NET 2.0, I have never been able to reproduce this myself, but I get emails informing me it happens to clients many times a week, often a few times in a row.>
I had this problem when developing on my own PC and could not find an answer anywhere on the net. It turned out that one of my teammates added this to the web.config:
So the web.config
on the developer’s desktop should not have the tag and the DEV/QAS and Prod web.config files should have it.
I also understand it is possible for developers to use IIS Express and then they could use SSL locally.