I am currently writting a site that will contain a Store, A forum and some other random content.
I obviously need to use SSL on login pages and address entry payment etc.
If a user logs in currently I am planning to just persist the https connection throughout the site.
Browsing any page (Bar login) will connect through http if the user is not logged in.
Certain resources will always use ssl e.g. geolocation (User requested function)
Should I persist the https connection for the logged in user or only on those pages that contain sensitive information
If a page is server via http is their any point using https in handlers?
What is the best way to impliment the https rules, I would prefer a simple option e.g. web.config or global.asax if possible
Are there any major things I should wa ...
Go to the complete details ...