Ernst has just posted his code for an ssl interceptor he just created. It looks awesome so take a look for yourself.
Blog
Recent Entries
BoxLang AI v3.1 Released - Audio, Async, Parallel Pipelines, and More 🎤⚡🔀
BoxLang AI 3.1 is here, and it's a release that makes your agents smarter, faster, and more capable than ever. 🎉
Luis Majano
Luis Majano
April
20,
2026
ColdBox 8.1.0 Released — AI Routing, MCP, and BoxLang-First Power! 🚀
We are thrilled to announce ColdBox 8.1.0, a targeted minor release packed with powerful new features, important improvements, and critical bug fixes across ColdBox, WireBox, and CacheBox. While minor in version number, this release delivers some truly exciting capabilities — especially for BoxLang developers building AI-powered applications.
Luis Majano
Luis Majano
April
14,
2026
ColdFusion Modernization for UK Universities Without Downtime
Across the United Kingdom, many universities still rely on legacy ColdFusion and CFML systems to power student portals, enrollment platforms, research databases, payment gateways, and internal academic workflows.
These systems are often:
- 15 to 25 years old
- Mission-critical
- Deeply integrated with student information systems
- Running on older Adobe ColdFusion or Lucee versions
- Tightly coupled monolithi...
Cristobal Escobar
Cristobal Escobar
April
13,
2026
Add Your Comment
(4)
Jan 19, 2008 23:50:35 UTC
by Rob Gonda
It's missing some functionality ... how does it know which event has to be secured? It should secure only specific events, and force unsecured requests for the rest. something like if not isSsl and requireSll then cflocate to https if isSsl and not requireSll then cflocate to http
Jan 19, 2008 23:54:53 UTC
by Luis Majano
That is up to Ernst, but I think its a good start.
Jan 21, 2008 16:01:48 UTC
by Ernst van der Linden
Rob you're right. We could implement that. Just make a list of allowed events without SSL as a property in interceptor xml definition and then check with event.getCurrentEvent() if we need SSL.
I will take a look and keep you informed.
Jan 21, 2008 17:47:57 UTC
by Ernst van der Linden
Rob, I made in new blog entry. The SSL interceptor now supports SSL for specific events. Comments are welcome!