Switching from HTTP to HTTPS in a Flex application

Question

Hi,

I am building a FLEX web application that also has a payment module where the user needs to enter his credit card details.

The whole Flex application runs on HTTP. However, whenever the user lands on a page where we ask for credit card details, we want these details to be sent over HTTPS. In this page we need information from the model of the application, because it holds certain selection the user did, the state the application is in, etc.

How can I best solve this? Do I need to make this page a Module that runs on HTTPS? Or can I just configure the specific 'credit card' services (we have a JAVA back end) so that these run on HTTPS?

Any help is appreciated. Thanks!

Answer 1

You will run into issues with the browser's same-orgin policy when you try to make requests to https://foo.com from an application loaded from http://foo.com. I'd recommend just putting the application and services on https. However if you do that make sure you are using the Flex Framework RSLs because most browsers don't cache SWFs loaded over https.

Answer 2

What if we cannot make the application run on https? What should we do there? AppEngine has a restriction that when AppEngine is running on Google Apps domain, https does not work.

Our scenario is as follows: We have a swf loaded from our server (say http ://foo.com). Inside the swf, we want to call https://graph.facebook.com/me/friends (URL of facebook's new Graph API, which requires https). Is this possible?

Any help is appreciated. Thank you very much.