[ARCHIVED] HTTPS and External Tools

[dshaw5]

Why is HTTPS required for external tools (aside from the obvious security answer, is there some other reason)?

[rmurchshafer · Accepted solution]

Canvas is delivered via https and most external tools get embedded within or transfer data between systems.  In most cases if content on a web site has both secure (https) and non-secure (http) content on it, the browser will complain about the site not being secure and sometimes block the content.  Canvas needs to protect student data and allowing the non-secure content to intermingle with the secure Canvas pages could cause issues that some schools would not really care for.

Rick