Menu
My site allows users to login through facebook coonect. Do I need to support ssl on my site by Oct 1?
Will greatly appreciate your input. Thanks, cody
469
asked Sep 19 '11 21:09
If your site has a login, you need SSL to secure usernames and passwords. If you are using forms that ask for sensitive customer information, you need SSL to stop your customer data from being appropriated by hackers. If you're an ecommerce site, you may need an SSL certificate. Do I Have Logins to Secure? Not everyone collects money online.
The HTTPS protocol provides greater security for your websites that use Facebook Login. By encrypting communications, it safeguards the privacy and integrity of the information exchanged. Using HTTPS for your site is often free, fast and can even boost your search engine rankings.
If you're not sure whether your site has SSL, you can easily find out by checking the URL of the site. If it starts with HTTP, you aren't secure, and if it begins with HTTPS, then your website has an SSL certificate. Some internet browsers have began publicly shaming sites without SSL.
Facebook will soon require all uses of Facebook Login on the web, including API calls with our JavaScript SDK, to happen exclusively from pages served over HTTPS. This protects user access tokens from disclosure on the network, keeping people's data and your application's authenticated sessions more secure.
IF you conform to the following sentence, you must support SSL by Oct 1st:
an SSL Certificate is required for all Canvas and Page Tab apps
See https://developers.facebook.com/docs/oauth2-https-migration/ for more details.
113
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With
