4 ms·
> Facebook SSL: Optional and not default Not only is it not the default, but it's hard to keep enabled for a good chunk of users. If you try to go to an app pa
by AgentConundrum 15y ago
> Facebook SSL: Optional and not default
Not only is it not the default, but it's hard to keep enabled for a good chunk of users. If you try to go to an app page[1], for example, you will be informed that SSL cannot be used. To continue, you need to disable SSL not only on pages that app uses, but the entire site. It doesn't get re-enabled when you leave the app.
[1] I don't know that this is true for all app pages, but it's definitely true for at least one of the most popular apps on Facebook.
- ZoFreX 15y agoAbout half the special offers / competitions run through Facebook seem to necessitate turning off SSL, which is a real shame. So far I've been leaving it on and giving my cash to other companies.
- joelhaasnoot 15y agoNot a FB app developer, but my naive experience is that not all apps are hosted on a domain with SSL available. If it's not on an SSL domain, it brings up a box asking you if it's ok to disable HTTPS.
- mtogo 15y agoWhich is a problem, why not just force all app developers to use SSL? Additionally, the button disables SSL forever, rather than just while you're using the broken app.
- ceejayoz 15y ago> Which is a problem, why not just force all app developers to use SSL? The developer console on Facebook says this will be the case on October 1.
- thechangelog 15y agoThis is changing as of October 1, when FB will require all apps to be served over SSL. They've been warning devs for months that the change is coming.