we are developing a website with multiple “call to action” links which display “Register / Login” popup if user is not logged in. That popup is displayed by means on jquery UI popup. We want to protect login/registration pages with HTTPS. It’s clear how to do this when these are standalone pages. But what will be the solution for a “normal” page which MIGHT have login popup displayed?
Obviously, if we force the whole website to work through HTTPS then this will be solved. But are there other ways?
Not sure if it matters, but we are using C# MVC3 with jQuery 1.7
Thank you.
In general, posting from an http url to an https url is problematic. Older versions of IE will completely block this. You could load an https iframe in the jQuery pop-up, but that’s getting messy. Additionally, users won’t have the spiffy green lock in their address bar if only the iframe is https. The cleanest way to do it is push the entire site into https or at least the pages that include the “Register / Login” popup.