HTTPS for the marketing site increases page load times; there's no real reason to force people just browsing by to a secured server. The app itself, of course,

HTTPS for the marketing site increases page load times; there's no real reason to force people just browsing by to a secured server. The app itself, of course, is secure; it's just on a different subdomain: https://secure.blueleaf.com/signin https://secure.blueleaf.com/signin My todo for today (assuming my cold doesn't lay me low) is to write about our approach to security.