Stefan Tilkov · Jul 20, 2012 · 10:50 AM UTC

Stefan Tilkov · Jul 20, 2012 · 10:50 AM UTC

Stefan Tilkov @stilkov

20 Jul 2012

If you're building HTTPS websites, there's no excuse for not reading this right now. Amazed at my own ignorance. imperialviolet.org/2012/07/1…

Jul 20, 2012 · 10:50 AM UTC

217

272

Tiang Cheng · Jul 21, 2012 · 2:53 PM UTC

Tiang Cheng @tiang

21 Jul 2012

Replying to @stilkov

@stilkov FYI, mixed scripting can be resolved using href="//myscriptname.js" instead of href="http://myscriptname.js" cc @pat

Matt Newman · Jul 22, 2012 · 4:40 PM UTC

Matt Newman @themattnewman

22 Jul 2012

Replying to @stilkov

@stilkov Dont think HTTPS should be used pervasively. Developers should use implicit objects to evaluate the state of the TSL/SSL connection