My team is developing a component for SharePoint 2010, it has one Web Application scoped feature, all it does is add the following into web.config:
<httpCookies requireSSL="true" />
<system.web> <forms requireSSL="true"> /* forms content */ </forms> </system.web>
My task is to test the functionality and verify that SSL (https) is really required (checking if the entries are in the config file is not enough) I need to verify this from user (browser) perspective.
Fiddler installed, and can inspect the traffic between browser and server, but I just don't know what to look for.
Problem is, when I go to a SP site in my environment using http, I immediately get asked for credentials and get redirected to https. Does this mean I can't verify this in current configuration? If so, what do I need to change? Or is it possible after all? What are the symptoms of requiressl being set to true as opposed to false?