Are Facebook canvas apps required to provide non-secure endpoints?

224 Views Asked by At

The Facebook documentation says that since October 1, 2011 canvas apps must provide access over HTTPS. Is the opposite true? Must canvas apps provide access over HTTP? I'd rather have my app accessible through HTTPS only. Will Facebook users using HTTP be able to use my app if I don't provide a non-secure endpoint?

1

There are 1 best solutions below

2
On BEST ANSWER

If you only specify a secure URLK - they will not be. They will be prompted with a layer asking them to enable secure browsing. They will NOT be able to access you application.