Secure and Non Secure Redirect Problem

[wingnut]

Google has favoured indexed the https website as it has a secure certificate used for the payment gateway. Unfortunately this causes an issue with the account login process which is setting a session on http.

My options as I see are:
1. Use rewrite (lls) to redirect https to http
2. Reconfigure the site to use https and redirect http to https

My worries are with 1 are the adverse affects with ranking but this is the easiest and quickest fix. 2. still uses a redirect but maybe is the correct route?

TIA

Andrew

[netmeg]

Me, I'd just go full https on the whole site. Long term, I think that will serve you best.

[engine]

Yup, i'd support that. Google loves https and favours it, so switching back to http is a backward step and could affect rankings, short term, and possible longer term.

Don't jeopardise the ranking. Best to move forward and fix the account log in.