> The only potential problem could be with management pages which don't use > 'manage*' naming convention, but until now I didn't encoutered any one > with well written products... FYI, I use a subdomain, like manage.foo.com, which enforces use of SSL on all pages within that domain. However, it doesn't block people from trying to use manage_* methods, so they can always access them over the clear if they want to. seb