'Configuring Set-Cookie in IIS

I have to set requireSSL flag in my Classic ASP Application.

Is it possible to set it in IIS using HTTP Response Header configuration?

I have configured "X-Frame-Options" in IIS so I am hoping there should be something similar like Set-Cookie - secure in IIS Manager.

iiscookiesasp-classichttp-headersowasp


Solution 1:[1]

Please check this post https://blogs.msdn.microsoft.com/rahulso/2007/06/19/cookies-case-study-with-ssl-and-frames-classic-asp/

TL;DR Now, enable SSL on your website. Open a command prompts and go to C:\Inetpub\AdminScripts Issue the following command and reset IIS> adsutil set w3svc/1/AspKeepSessionIDSecure 0.

Solution 2:[2]

Here is the tutorial for setting/replacing response header in IIS. You need to install HTTP Rewrite module first

Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source
Solution 1 c-sharp
Solution 2 ysakiyev

Related Questions