ASP.NET: best practice for redirecting to https

Question

I am working on a project that has one page that needs to make use of the SSL certificate. All of the links in the site to this page make use of https instead of http, but in th

Answer 1

Actually the best practice would be to do this in one of three places, assuming hardware or IIS settings are not an option. Just code options.

1. In an HTTPModule. HttpModules are ran before any request is processed, so you could do the URL check and redirect there. This is what I would do.
2. In Global.asax.
3. In a custom base page, in the init function.

All of those would be good options. One and two are guaranteed to be hit by every request processed by ASP.NET. The third one requires that you make sure all of your pages inherit from the base page.

I would not put the code in each page, that's just bad programming.

Let me know if you need more clarification, but this is a good start.