I am new to creating Web applications, and would like to be able to store customer details in a Web application available over the Internet.
Is it enough to just secure a log in page for the application with an SSL certificate (i.e. over https)? Then I could read/write customer details over http, which would obviously be faster.
Or, do I have to secure the entire application and access everything over https?
I would guess that I can secure the log in page, and any pages involving credit card details, but access everything else over http? Would that be legal and secure enough?
I guess what I am asking is, can I pass customer addresses, telephone numbers, e-mail addresses etc. over a non-secure connection via the Internet?
...
Go to the complete details ...