We have an internet facing WCM site developed in MOSS. We also have several centrally administered browser enabled forms as part of that site. The forms are exposed to the user via the XmlFormView webpart. The business requirements have changed and the forms must now use SSL.
Is there a way to require SSL on the forms without requiring SSL on the entire site? We're trying to meet this late breaking requirement without a major overhaul.
Some of the options we've considered:
-
Creating a separate web application running SSL to host the forms, and send the user to that site to complete forms. This falls into the major overhaul category.
-
Keeping the forms where they are and adding a hidden web part the the pages that host the forms. The hidden webpart would redirect to https if https is not in the current url.
Any thoughts or guidance on requiring SSL on internet facing browser enabled forms and anonymous access?