Hi,

We have been using Concrete5 more and more and we have decided that its about time we upgraded some of our security. We did intend to make users login via SSL, but the site itself would be accessable over clear HTTP. However it appears that concrete5 really fights you on anything login related. I have it now so the whole site can be viewed over HTTPS or HTTP and that all works, but whenever you go to the login page it always says that must be over plain text (if you go to the HTTPS version it redirects you to the non-https version).

Is there any way I can change this?

Thanks