Enabled Protocols specifies the protocols that requests can use to access an application. The default value is 'http', which ...

Enabled Protocols specifies the protocols that requests can use to access an application. The default value is 'http', which enables both the HTTP and HTTPS protocols. Specifying 'https' also enables both HTTP and HTTPS. If neither 'http' nor 'https' are in the Enabled Protocols list, both HTTP and HTTPS are disabled for your application. If you want to accept only HTTPS requests, configure the SSL feature for your site. If your site has additional bindings that require a different protocol to accept request, add those values, such as NET.TCP, to Enabled Protocols in a comma-delimited list.