I have read the previous posts about using the RequireHttpsAttribute to secure individual controllers:
ASP.NET MVC RequireHttps in Production Only
but is the
You could use a base class for all of your controllers, and decorate that with the require ssl attribute.