I have been thinking about this for the last day. Would you like all traffic to the particular host to be forced to ssl, or would you want to tweak it on a URI by URI basis? A host based scenario is easier to manage (and code!), but the URI approach will provide more flexibility. |