SSL

SSL can cause you a problem if your serving an advertisement that doesn't support https.
Hello,

Thanks for your email. We’re sorry to hear that you're experiencing difficulties with your AdSense ads. We've provided some information below which we hope will address your question:

1. Ads are placed on an IP address URL or a page protected by Secure Socket Layer (SSL).

We do not serve ads to IP URLs or pages protected by SSL. Example IP URLs are: http://127.0.0.1/myhome.php or http://[2001:db8:0:1]:80. You can identify a page protected by SSL if the URL starts with "https://" instead of "http://".
 
Hello,

Thanks for your email. We’re sorry to hear that you're experiencing difficulties with your AdSense ads. We've provided some information below which we hope will address your question:

1. Ads are placed on an IP address URL or a page protected by Secure Socket Layer (SSL).

We do not serve ads to IP URLs or pages protected by SSL. Example IP URLs are: http://127.0.0.1/myhome.php or http://[2001:db8:0:1]:80. You can identify a page protected by SSL if the URL starts with "https://" instead of "http://".
Just use the protocol independent URL in your Adsense code (://). It works no matter what they say.
 
If you leave off 'http:' or 'https:' in a URL it defaults to using the protocol you are currently visiting on (so SSL or non-SSL).
 
Examle for adsense.

Code:
<script type="text/javascript"><!--
google_ad_client = "ca-pub-xxxxxxxxxxxx";
/* sample */
google_ad_slot = "xxxxxxxxxxx";
google_ad_width = 250;
google_ad_height = 250;
//-->
</script>
<script type="text/javascript" src="//pagead2.googlesyndication.com/pagead/show_ads.js">
</script>
But I don't recommend doing this.
As I don't see any documentation that Google Adsense allow it.
 
What do you use it for?

Everything if you give a damn about your security :)

I've got a browser plugin installed that forces the browser to use SSL versions of sites if available. The only time you probably don't need to worry about SSL is if there is no user input being done, as thats its big advantage. For forums there is no excuse for not offering it IMO. It's not like it costs a lot.
 
But I don't recommend doing this.
As I don't see any documentation that Google Adsense allow it.
Last I checked they don't offer an SSL version, so it'll just fall back to http. Google wont offer an SSL version of Adsense any time soon - it'd cause too many heavy load issues on the servers.

Its worth changing any external CSS/JS/Images to use //sitename.com/blaa instead of http://sitename.com/blaa though.
 
Everything if you give a damn about your security :)

I've got a browser plugin installed that forces the browser to use SSL versions of sites if available. The only time you probably don't need to worry about SSL is if there is no user input being done, as thats its big advantage. For forums there is no excuse for not offering it IMO. It's not like it costs a lot.
Do you use advertisement networks at all?
 
Do you use advertisement networks at all?
Yep. On the sites that I use SSL I obviously give the option not to use SSL for those who've not got the ability to disable the warning on their browser. I generally default the site to http in that case. I do have a few sites that don't use SSL but I always use it on my larger ones, where user input is taking place - ads still work fine, just older browsers (and IE) start having a fit about how you're about to kill a dolphin by allowing an invalid certificate.

For your forums, I'd certainly offer it as a choice - those that care enough to want to use SSL will likely have the security notice disabled so won't be affected by any non-secure content messages.
 
I deleted SSL. Decided I don't need it since I won't be installing a shop anymore. Good thing it was only $5.
 
That all sounds complicated. Why don't I just use it for the login screen instead?
Login credentials are more or less transmitted with every request via a cookie (how do you think the "stay logged in" option works?)...

That being said, it's probably not a huge deal unless your site has something that people want to steal. On the flip side, if you do implement SSL well, it can actually be faster than non-SSL. Google "SPDY" for more info on that...
 
SSL or Secure Sockets Layer is used to make the connection more secure so that users listening on the line won't be able to tell what you're doing as easy.
Primarily it's used for proxy's, VPN's or stores to purchase something with some people adding it just for the "security" even though there is no need.
SSL can be stripped though so it's fairly pointless to use in some cases.
Just a few thoughts for you.
 
Last edited:
I'm really surprised xF's forum here hasn't moved to SSL only yet. Over the last year, I have used less and less forums that don't force SSL
 
Top Bottom