It's a bit tricky
As for me, i use first (index) page to ensure the browser can run AJAX (no AJAX in this page, however). If the browser is unsupported, i display such error message and provide a link to download firefox. This way, u can detect SSL in this static page, if browser were not in SSL yet, redirect it to SSL, so the session will be saved BEFORE u enter REAL AJAX Application.
|