Currently I dont use SSL. But my plans is to roll out SSL certificate and make my entire website secure via https protocol. After searching on web, I found the simplest way to handle redirects of all http:// pages can be done via global.asax page where you check the request page.
My question now is - should I SSL only few portions of website or is there a benefit of implementing on entire website. I have seen merchant websites using SSL on payment pages, why wont they implement on the entire site? Wouldnt we want entire web application to be safe? Is there a tradeoff in performance? Just curious why cant we implement SSL fully...
Nimish
...
Go to the complete details ...