LifeinAsia
msg:4241021 | 2:46 pm on Dec 10, 2010 (gmt 0) |
Is there a particular reason why every page needs https?
|
aspdaddy
msg:4241067 | 4:36 pm on Dec 10, 2010 (gmt 0) |
I dont yhink it would help if any did, since a site running ssl can only be bound to one endpoint.
|
dogweather
msg:4241249 | 11:38 pm on Dec 10, 2010 (gmt 0) |
> Is there a particular reason why every page needs https?
It's a research site, and the research topics may be personal.
> I dont yhink it would help if any did, since a site running ssl can only be bound to one endpoint.
In my experience, it makes a big difference: a web page served over SSL can have media from many different servers in it. Each media item simply also needs to be served via SSL. Google analytics will do this, for example.
|
LifeinAsia
msg:4241258 | 12:17 am on Dec 11, 2010 (gmt 0) |
| It's a research site, and the research topics may be personal. |
|
Not sure about any connection between those... I can understand needing https for a secure form to enter sensitive information. But do you really want to put ads on a secure form?
My point is that you probably don't need to have every single page served through https.
|
dogweather
msg:4241264 | 12:30 am on Dec 11, 2010 (gmt 0) |
@LifeinAsia,
You'll have to take my word for it, that this arrangement provides business value. :-)
> I can understand needing https for a secure form to enter sensitive information.
Ah hah, but Firesheep has shown the problem with this strategy.
|
httpwebwitch
msg:4242279 | 2:04 pm on Dec 14, 2010 (gmt 0) |
AdSense is available as https
That is annoying. Sure would be nice if the ad networks had a quick FAQ to find out if they offer their feed on SSL, before you sign up.
OTOH, if an ad network offers their feed as a raw XML web service (or something like that), you can write a proxy script that requests the ads, then serves them from your own domain on SSL. YPN used to work that way, as did Overture.
But if the ad network merely works via a drop-in <script> (many do) and the @src isn't available on SSL, then that won't work. :(
|
|
