3 ms·

One line down - >It goes without saying that all pages shown to logged-in users should be served over HTTPS