Hi Gordon,

I've used SecuritySwitch for that. It's a one dll .NET library, configured through a config section in web.config, which means it's possible to just add the section declaration to web.config, and have the pages configured in its own config source file living in /config. Works perfectly for what you want.

Here's a sample configuration:

<!-- web.config -->
<configSections>
 <section name="securitySwitch" type="SecuritySwitch.Configuration.Settings, SecuritySwitch" />
</configSections>
<securitySwitch configSource="config\SecurePages.config" />

<!-- SecurePages.config -->
<securitySwitch>
 <paths>
  <add path="~/login.aspx" matchType="Exact" />
 </paths>
</securitySwitch>

Which will set up your site to ensure that /login.aspx is using https, and switch back to http for all other pages, it even works for normal umbraco pages, as it looks at the request url coming in, not what it translates to after internal Umbraco url rewriting has taken place.

Regards
Jesper Hauge