apache httpd for secure site
Protect users from FireSheep WiFi cookie attacks by redirecting all access from your HTTP site to your HTTPS siteredirect from HTTP to HTTPS (SSL)
RewriteEngine On
RewriteCond %{HTTPS} !on
RewriteRule .* https://%{SERVER_NAME}%{REQUEST_URI} [R,L]http auth
even works if you put it before any http authentication settings to force any http auth username and password to be sent over a secure connectionAuthName "Secure Site" AuthType Basic Require valid-user
REFERRERS
HtAccess