Topic-icon Issues with JFBConnect forcing SSL all the time with open graph

Active Subscriptions:

None
10 years 9 months ago - 10 years 9 months ago #34599 by sulkazi
Hello Guys,

Could someone tell me why for actions to post to the activity log, my site has to be in SSL mode the whole time? I watched the demo video that Facebook has and the page they tested was non-ssl. Why does JFBConnect force you to be in SSL mode to make things work? When it appears Facebook themselves did not. Am I doing something wrong where I should be able to leave SSL mode after a user logs in using their Facebook credentials and still have the actions post to their activity log on Facebook?

Issues I have with being forced into SSL mode all the time are the following:
1. Joomla cannot cache everything and my site takes a performance hit when it is under load with users.
2. I am unable to display ads on my site since they are often coming in on unsecure URLs as well as their supporting graphics... this throws up an unsecure error to my users browsers scaring them off cause they think the site is unsecure.
3. Components like EasyBlog link a lot of their content like blog images or videos from youtube in http and not https. So when viewers go to these pages they get unsecure errors and it scares my users off.

To enable the ability for a site to post its actions to Facebook without having to be in SSL mode for the whole session is essential. Since it makes no sense at all to have your whole site running SSL the whole time after a user logs in using their facebook credentials.

What am I doing wrong here. Please offer up any advice if you are able. I love what this component does... just not the part of being in SSL mode all the time to work... when Facebook's open graph demo video shows you do not need to be.
Last edit: 10 years 9 months ago by sulkazi.
The topic has been locked.
Support Specialist
I'm honestly not sure what you mean. Open Graph Actions don't require SSL and JFBConnect doesn't force your site into SSL. Can you explain a little bit more about what's happening? When a user browsers your site, are they in SSL by default, or are you saying that actions will only post if the user is connected to your site over SSL?

If there's somewhere we can test, let us know that as well.

Thanks,
Alex
The topic has been locked.