Do I need to support ssl on my site that allows login through facebook connect

My site allows users to login through facebook coonect. Do I need to support ssl on my site by Oct 1?

Will gre开发者_如何学Catly appreciate your input. Thanks, cody

IF you conform to the following sentence, you must support SSL by Oct 1st:

an SSL Certificate is required for all Canvas and Page Tab apps

See https://developers.facebook.com/docs/oauth2-https-migration/ for more details.

It seems like if you are not using Canvas or Page Tab ON FB, then SSL won't be required on your site for FB Connect. You will have to make the api call to FB over SSL and must config your app to use OAuth 2 -- for the JS SDK that means setting oauth:true. See https://developers.facebook.com/docs/oauth2-https-migration/

Only on *.facebook.com are you required to use an SSL certificate. More specifically, you must specify a URL that begins with https:// for your canvas URL as of Oct. 1st. When https://apps.facebook.com/<YOUR_URL> or https://www.facebook.com/<YOUR_URL> loads your IFRAME, the IFRAME url must begin with https.

However, you do not need to support SSL on your website outside of Facebook. If you use Facebook for Websites, you need to make no change to that portion of your Facebook implementation.

The idea is that one day all traffic on facebook.com will be https by default, and they don't want mixed content warnings when https://*.facebook.com loads up your IFRAME url.