You are saying if a user goes to one area that is http they must go to https - thats a redirect. the browser won't know it yet since the protocol is http, not https, so as far as I know, you need at least a redirect to tell the browser to handle ssl. if you did a server.transfer. you are internally going to a new page, not changing protocol, so you still must do some sort of redirect to have the browser setup the ssl session.
=================================== This list is hosted by DevelopMentor® http://www.develop.com View archives and manage your subscription(s) at http://discuss.develop.com
