Add-on Require SSL for account operations

[naia]

There should be an addon that requires and redirects users to a secure (https) connection when performing the following actions:

• Creating An Account
• Logging Into An Account
• Changing An Account Password
• Resetting An Account Password

 

[SamL]

If you use SSL, why not just re-direct all traffic to it via .htaccess rather than breaking it down by action? There's really no downside.

 

[Jeremy P]

In truth I think it's a bit silly these days to use partial SSL. Might as well go full SSL, you can take advantage of spdy and it's really not as taxing computationally as it used to be back when partial SSL was common practice.

.. but this is definitely something to do in .htaccess and not really an addon.

 

[Liam W]

There is absolutely no point in using HTTPs for only certain things, as the session id is always transferred anyway.