CODEWITHSUNDEEP
securityfacebook
Furkan Gözükara
Furkan Gözükara

Reputation: 23800

Will secure url be forced on canvas pages?

Will secure url be forced on canvas pages ? Or will we able to continue serving our applications from normal urls ? What exactly will happen.

Upvotes: 0

Views: 243

Answers (2)

TESTERTHETHUMPER
TESTERTHETHUMPER

Reputation: 176

Official statement is that apps will enter a sandbox mode if secure_canvas_url isn't entered for an application.

Upvotes: 1

chwk
chwk

Reputation: 441

According to the developer roadmap, apps MUST obtain an SSL certificate. From https://developers.facebook.com/roadmap/:

  1. Apps on Facebook Authentication and security migration

All Canvas and Page tab apps (that are not using FBML) must convert to process signed_request (fb_sig will be removed) and obtain an SSL certificate for use in ‘Secure Canvas URL’ and ‘Secure Page tab URL’ (unless you are in Sandbox mode).

I haven't seen any official statements regarding what will happen to apps that are not available via HTTPS by October 1st. I expect that many developers will not have that feature ready, so Facebook might just display a warning message for some time. But I guess that at some point, apps without a secure URL will not be made available any more. Of course, that's just speculation.

Upvotes: 1

Related Questions