enforce EntireSiteSSL,
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
<auth-constraint/>
</security-constraint>
+ <security-constraint>
+ <web-resource-collection>
+ <web-resource-name>EntireSiteSSL</web-resource-name>
+ <url-pattern>/*</url-pattern>
+ </web-resource-collection>
+ <user-data-constraint>
+ <transport-guarantee>CONFIDENTIAL</transport-guarantee>
+ </user-data-constraint>
+ </security-constraint>
+
<!--
<security-constraint>
<display-name>SecureChannelConstraint</display-name>
