A very nice contorl/project (recommend by my Chief Architect) for a very common problem which we all face when we need to secure only specific pages. Below is the link.
http://code.google.com/p/securityswitch/
I applied this in my production environment and it is working perfectly. All related issues are solvable/configurable.
Some useful email exchanges between me and Matt(the guy who made this) are added below as comments.
Let me summarize the steps (If your using Visual Studio 2010)
- Install-Package SecuritySwitch from VS > Tool > Extension Manager > Search “SecuritySwitch” install it, more details can be found on http://nuget.org/packages/SecuritySwitch.
- Above step set-up every thing for you for your development environment. (Put some attributes in you web.config, add some dlls etc)
- Now you need to specify your secure pages in web.config inside securitySwitch>paths>
- These are important attributes mode=”" baseInsecureUri=”" baseSecureUri=”"
- For the staging or production deployment please go through with the below comments.