I have seen the module Secure Pages, and also found Custom SSL redirect and read all the issues related to this and Commerce, but most seem out dated.

Can anyone say as of this point what is the best way to run the site on http and the checkout (anonymous users) with https?

2 Answers 2


If you have control over your hosting, the easiest is to serve everything on https, this will make the whole setup easy and if used in combination with SPDY - and PFS - you get both speed and SEO improvements.

  • What about SEO penalties for redirects, Is google smart enough to know its the same site? Already the site will have many redirects though (re-build site launch)
    – petergus
    Commented Sep 27, 2014 at 18:10
  • 1
    AFAIK redirects from http to https are allowed, google prefers all sites running on https.
    – Attiks
    Commented Oct 10, 2014 at 6:54

It's hard to say what's 'best', it depends what you mean by that.

If you're just looking for a working solution, the dev version of Secure Pages along with the core patches it recommends works great.

Best thing you can do is install the various options you've identified, do your testing as normal, and ask a more specific question if the modules do something you don't expect.

Not the answer you're looking for? Browse other questions tagged or ask your own question.