301 vs 302 redirect for https secure bank site redesign

[bbcarter08]

Preamble: I did my searching and reading before posting this, and to my knowledge there isn't any good info on this combination of issues.
-----
We're redesigning a bank website, and I found out a lot of banks have http homepages with customer logins - and this isn't secure- page with the form on it has to be https.

If there's going to be a bank login on every page the whole site has to be https.

1. Do https pages rank as well as http, all things being equal? Of course, indirect factors might make things unequal: I bet some other webmasters will accidentally create links to the http version, so https may not rank as well. 301 from the http to https would deal with this, tho, no?

2. Plus you have to prevent the duplicate content that can happen with http and https.

3. We have IBL's we don't want to lose- I know we can 301 redirect the homepage to the https version and that transfers PR etc., but we were considering doing what DNBNOR.com has done, which is use a 302 redirect- I don't know if there are any consequences to using a 'temporary' redirect long term? But the idea would be to keep the http version indexed- honestly I'm not sure there is much benefit to that, and your guys' wisdom on issue #1 above would determine that. We don't care if the site is listed https as long as there's no future SEO impact.

4. From what I can see in Google webmaster tools, choosing the preferred site does not apply to https vs http.

Any help? Thanks!

[Quadrille]

1. No reason why the https should not rank as well so far as I'm aware - but I'm no https expert.. Sure there may be a few faulty links (see 3).

2. Do be careful to avoid duplication (see 3)

3. If you want to redirect permanently, you should use the 301 permanent redirect. this will avoid all duplication issues, be the most efficient at preserving link benefit, and least likely to have any unwanted and damaging effects.

However, you may need to actively promote and link build to protect from short term damage, and minimise the (small) risk of longer term damage.

4. I'm not sure what you are asking here.

[youfoundjake]

1. yes
2. True
3. Why not just do a 301 and have a permanent solution.
4. Nope, not that I saw either.

I'd recommend doing a google search for the term bank
Look at the results.
Then spot check some of them by using the header checker here on WebmasterWorld
[webmasterworld.com...]

here is what Bank of America's site looks like:

#1 Server Response: [bankofamerica.com...]
HTTP Status Code: HTTP/1.1 301 Moved Permanently
Server: Sun-ONE-Web-Server/6.1
Date: Wed, 27 Feb 2008 04:14:03 GMT
Content-length: 122
Content-type: text/html
Location: [bankofamerica.com...]
Connection: close
Redirect Target: [bankofamerica.com...]
#2 Server Response:
[bankofamerica.com...]
HTTP Status Code: HTTP/1.1 200 OK
Date: Wed, 27 Feb 2008 04:14:03 GMT
Content-language: en-US
Mar 2008 04:14:02 GMT; Domain=.bankofamerica.com
Connection: close

As far as wells fargo, their page is showing up as https.