Facebook allows you to surf over a secure HTTPS connection, although sadly it does not enable this by default. Even when HTTPS is enabled, you encounter some annoying user experience when trying to access a Facebook application. It will output
Switch to regular connection (http)?
Sorry! We can’t display this content while you’re viewing Facebook over a secure connection (https).
To use this app, you’ll need to switch to a regular connection (http).
My question is twofold:
- Why does Facebook not enable HTTPS by default?
- Why does Facebook require disabling HTTPS when using a third-party application (apps.facebook.com).
NOTE - When looking for example apps that require the fallback to http, I couldn't find any. Did Facebook remove that requirement? If so, the second part of my question has become irrelevant. Instead, I wonder when and why this has changed.