With this one not. On https://really-simple-ssl.com/knowledge-base/disabling-ssl-for-one-page-only/ I’ve explained a manual and a plugin method you can use to put only some pages on SSL, or some pages not on SSL.
If you want all your site on SSL but some pages not, there is an issue: in modern browsers, as soon as you have visited the root domain (the homepage) the browser will start forcing all subpages over SSL as well.
That is why in this plugin the homepage can never go over SSL when you are excluding pages from SSL.
Thank you for replying. And just to confirm I have three questions, please…
1) Are you saying that my entire site could be SSL, including the home page, but with your paid-for plugin I could exclude certain pages from being SSL?
2) And if your plugin can do that, will landing on the non-SSL pages trigger an error in browsers?
3) And if it does not trigger an error in browsers, could your paid-for plugin be used for my original intention which is to put a non-SSL iframe on a mostly SSL site?
Thanks again.
I thought of a couple more questions, please.
4) Would installing your plugin cause problems on a site that was already SSL without the use of a plugin?
5) Since your plugin disables SSL from the home page, what will happen when someone clicks an HTTPS link to my home page like this https://MyHomePage.com? Will they get a 404 error or will they be sent to my home page with no SSL like this http://MyHomePage.com?
Thank you.
1) if you exclude certain pages from being SSL, the homepage also cannot be SSL. This because of the way browsers handle SSL.
I can update the plugin with an option to override it, but then a visitor would get the SSL page on all pages after he/she has visited the homepage.
2) Landing on non SSL pages should not generate errors.
3) Yes.
But you might also want to look into the possibility of excluding the iframe url from the mixed content fixer so it doesn’t get forced to https.
https://really-simple-ssl.com/knowledge-base/exclude-url-mixed-content-fixer/
Thanks again, and there was this question too, please…
5) Since your plugin disables SSL from the home page, what will happen when someone clicks an HTTPS link to my home page like this https://MyHomePage.com? Will they get a 404 error or will they be sent to my home page with no SSL like this http://MyHomePage.com?
I installed the free version of your plugin and followed your directions on how to disable SSL from a specific page on an SSL site and you could see the broken padlock in the URL in Chrome, Firefox and Safari for that one page. But worse than that, Chrome, Firefox and Safari all produced “insecure website” and “your connection is not secure” etc. warnings. And the non-SSL iframe I installed still didn’t work. Unless you have something else to suggest I’m afraid that method doesn’t work. Thanks, though.
The browser will remember that your site was on SSL. So you’ll have to clear the browser cache, exclude the homepage, and than avoid visiting your homepage (if it’s on SSL) if you want this to work.
What I would suggest is not excluding one page from SSL, but excluding an url from the mixed content fixer. I think that might work well. You’d get mixed content issues on that page of course.
