https login form

Question

What should i consider when switching a simple(user+pass) login form from http to https? Are there any differences when using https compared to http?

From what i know the browser won't cache content server over https, so page-loading might be slower, but other that that i know nothing about this.

Anyone has any experience with this things?

Answer 1

Do not mix secure and non-secure content on the same site as browsers will display annoying warnings if you do so.

Additionally, set cookies as https-only when the users uses https so they are never sent over a http connection.

Answer 2

When switching over to https consider that ALL web assets (images, js, css) must be coming from a https domain, otherwise your user will get warnings about unsecure transmission of data. If you've got any hard coded urls you'll need to dynamically change them to https.