NYCPHP Meetup

[John Campbell]

>  How do you handle this scenario?

I looked at what amazon.com does and assumed they have it right.  The
only process that is https is the checkout process.  Once you enter
the checkout process, there are essentially zero links on the https
pages.

I feel that once someone clicks "checkout", there should be zero
distractions.  Amazon does a really good job with this; most of the
airlines have checkout processes that include unnecessary stuff like
site navigation.

This doesn't really answer your question, but if the checkout process
is really simple, the problem of http/https switching tends to go
away.

-John C.