This is one of those things security people say that just does not jibe with reality. Everything in security is a trade off with usability, and not having your

This is one of those things security people say that just does not jibe with reality. Everything in security is a trade off with usability, and not having your site on http, just for a redirect to https, is just completely not feasible.