Switch internal and exterior one-way links to HTTPS: Ensure all one-way links for your web site are transformed around from HTTP to HTTPS. When you've got just a few web pages, you can do this manually. SSL/TLS is very suited for HTTP, because it can offer some protection regardless of http://XXX