HTTP -> HTTPS redirect and add HSTS header

Global.asax.cs

// ...
        protected void Application_BeginRequest(object sender, EventArgs e)
        {
            switch (Request.Url.Scheme)
            {
                case "http":
                    RedirectToHttps();
                    break;
                case "https":
                    AddStsHeader();
                    break;
            }
        }

        void AddStsHeader()
        {
            Response.AddHeader("Strict-Transport-Security", "max-age=31536000");
        }

        void RedirectToHttps()
        {
            var path = "https://" + Request.Url.Host + Request.Url.PathAndQuery;
            Response.Status = "301 Moved Permanently";
            Response.AddHeader("Location", path);
        }
// ...

I forget the context of this gist, and haven’t programmed in .net since 2015. Don’t look at this as any sort of best practice without doing your own due diligence to understand the problem and solution. Good luck