• This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn more.

Add-on Require SSL for account operations

Shiro

Well-known member
#1
There should be an addon that requires and redirects users to a secure (https) connection when performing the following actions:
  • Creating An Account
  • Logging Into An Account
  • Changing An Account Password
  • Resetting An Account Password
 

Jeremy P

Well-known member
#3
In truth I think it's a bit silly these days to use partial SSL. Might as well go full SSL, you can take advantage of spdy and it's really not as taxing computationally as it used to be back when partial SSL was common practice.

.. but this is definitely something to do in .htaccess and not really an addon.
 

Liam W

Well-known member
#4
There is absolutely no point in using HTTPs for only certain things, as the session id is always transferred anyway.