SSL Configuration

As common practice this site enforces HTTPS, see https://docs.microsoft.com/en-us/aspnet/core/security/enforcing-ssl Beside purchasing a certificate (can be done in Azure App Service) Let's Encrypt (https://letsencrypt.org/) provides a free of costs alternative. To automate the process of lifecycle-management of the certificate the web extension https://github.com/sjkp/letsencrypt-siteextension could be used. I used this before but it is a little bit tricky to get this up and running. See https://www.hanselman.com/blog/SecuringAnAzureAppServiceWebsiteUnderSSLInMinutesWithLetsEncrypt.aspx

But now there is another option available as preview: "App Service Managed Certificates" let you secure the site with certificates without charge, see the announcement https://www.hanselman.com/blog/SecuringAnAzureAppServiceWebsiteUnderSSLInMinutesWithLetsEncrypt.aspx and documentation https://docs.microsoft.com/en-us/azure/app-service/configure-ssl-certificate#create-a-free-certificate-preview.