| SSL (hopefully compromised minimally by non-SSL resources) There's a reason browsers don't display a secure logo on HTTPS connections with non-HTTPS resource

| SSL (hopefully compromised minimally by non-SSL resources) There's a reason browsers don't display a secure logo on HTTPS connections with non-HTTPS resources: it's not secure. It's not "minimally compromised", it's compromised. If my server has one service with one vulnerability, it's not "minimally vulnerable", it's vulnerable. | I don't see any reason not to give the minority SSL I was being sarcastic. | Isn't it perfectly plausible that 80% of a site's users don't give a hoot about security, but 20% do? It's not even about the users. The site should not ever be mixing HTTP with HTTPS on the same page.