Web Hosting Talk : Web Hosting Main Forums : Reseller Hosting : WHM/Cpanel logins: Do you redirect to SSL?

[charlier]

Hi,

Just looking to see how the rest of the cpanel hosting companies out there handle their cpanel and whm logins for their shared and reseller clients?

Do you even allow non secure logins?

Do you redirect to your SSL'd domain?

Do you use the origin domain and just let the browsers complain?

I'm torn on which way is best, as most resellers prefer to not let their clients know they are reselling.

I do and am using a anon domain for my server side activies, so I suppose it wouldn't be terrible to redirect to the ssl'd domain.

Any insight on how you guys do it would be beneficial. I also wouldn't mind to hear from anyone who has a reseller account as well.

Thanks,

[IGXHost]

Yes, we allow non-secure logins but that's to the client's discretion. Some people don't like using secured logins due to speed and browser issues.

[njoker555]

Originally Posted by igxhost

Yes, we allow non-secure logins but that's to the client's discretion. Some people don't like using secured logins due to speed and browser issues.

same here - it really don't make a huge difference unless you have a couple of hackers on your tail. right now you should allow the client to decide and then later on you can forward if you see things changing. really up to you on how you want to function

[txitcs]

Originally Posted by igxhost

Yes, we allow non-secure logins but that's to the client's discretion. Some people don't like using secured logins due to speed and browser issues.

I do the same thing for the same reasons.

[FazeWire]

We use secure redirects, but tell the customers the insecure URL if they prefer.

[jayh]

We tried the forced SSL redirect and too many people complained. Instead, we have informed our customers of the various ways they may choose to access either WHM or Cpanel and also the benefit of using SSL.

[LoganNZ]

Yeah I set up optional with all my clients servers also, we had 1,200 complaints in a matter of hours from one batch change across 28+ box's. heh, we changed it back fairly quickly

[charlier]

Thanks guys...

When we where only doing shared accounts, it was forced redirect, and namely I don't think it mattered to those clients, cause they already knew they where on my server, so it all just worked out.

Right now I'm using redirect to SSL but from origin hostname, but since FF3 and ie7 are so common, they really let the client know it's a bad idea.

But now that we are doing reselling, I see this being an issue for them not wanting our named to show up on important things like logins.

I'll make sure to modify my templates to warn about the dangers of non secure logins, and the choices they have.

Thanks for the input.