2

I've seen articles discussing this, but I haven't seen an answer on how to get around it or a good suggestion for an alternative.

I have a total AJAX site including authentication. When a user signs up or logs in, they make a cross domain https to my site which they initially load http. Obviously, I need them to be able to set some session variables in https and access them in http.

I know you "can't" do this, but can you? If absolutely not, what's the most secure alternative?

Many thanks in advance!

  • 1
    Looks like there is an answer for you here http://stackoverflow.com/questions/441496/session-lost-when-switching-from-http-to-https-in-php – fracz Nov 10 '12 at 20:18
  • 1
    Check this http://stackoverflow.com/questions/8414786/javascript-cross-domain-call-call-from-http-to-https – Ibrahim Nov 10 '12 at 20:44

0 Answers0