Azure.AppService.UseHTTPS.md

severity	category	online version
Important	Security configuration	https://github.com/BernieWhite/PSRule.Rules.Azure/blob/master/docs/rules/en-US/Azure.AppService.UseHTTPS.md

Azure.AppService.UseHTTPS

SYNOPSIS

Use HTTPS only. Disable HTTP when not required.

DESCRIPTION

Use HTTPS only. Disable HTTP when not required.

RECOMMENDATION

If access through HTTP is not required consider disabling HTTP. When HTTP is enabled, both HTTP and HTTPS will be accepted by Azure App Service.