wordpress multisite, https for whole site or just admin?

Once you have https for admin users you need to have https on the front end as wellat least for the logged-in users as their authentication cookies will be sent in clear text when they access the front end and 3rd parties will be able to duplicate them and use them to get into the admin area for that user.

This do not require https everywhere but it is just the mentally easier option, and you don’t need to worry about some bug in some badly coded plugin or theme exposing your user’s cookies. For the option of SSL only for logged in users take a look at http://codex.wordpress.org/Administration_Over_SSL, couldn’t find anything more recent so you should use it as starting point for investigation.

Related Posts:

  1. Switching MultiSite installation from HTTP to HTTPS
  2. What do I need to do to convert my MultiSite from HTTP to HTTPS?
  3. How to use WordPress multisite with mixed HTTP and HTTPS sites?
  4. Add New Sub Site from the WordPress back end then in sub site options table option_value must be with https
  5. Make default new sites https (multisite)
  6. wp-admin redirect loop with ssl
  7. How to properly force https and www on multisite with Apache HTAccess
  8. https redirect hell (adding www)
  9. Site kit Google Analytics setup giving Error: {“error”:”invalid ‘redirect_uri'”}
  10. Link to Network Admin Broken After Switching to HTTPS
  11. Htaccess file isn’t redirecting http sub-pages to https––they display 404 error instead, tried many solutions and none work
  12. Migrating MultiSite to SSL: Media Library not updating
  13. Domain Mapping for WordPress MU and https redirection – How to?
  14. Generate HTTPS Urls in multisite
  15. Redirecting specific sites to HTTP in WordPress Multisite
  16. WordPress Multisite with Wildcard Certificates not mapping correctly
  17. How to convert multisite subdomain from http to https
  18. WordPress Multisite keeps redirecting to HTTPS
  19. Update siteurl and home in multisite subsites to https
  20. Single sign on to sub-sites in Multisite Network
  21. Nice font not working when http to https – SSL Issue
  22. How to use WordPress Multisite With Different Domain Names?
  23. How To Add Custom Form Fields To The User Profile Page?
  24. Where are available Roles Defined in the wp_ database?
  25. restore_current_blog() vs switch_to_blog()
  26. Can i merge 2 new WP_Query($variable) ‘s?
  27. How to disable a network enabled plugin for just one site?
  28. How to reliably flush rewrite rules on multisite?
  29. Site Redirecting to wp-signup.php
  30. Moving a WP Multisite to a subdirectory
  31. Cookies in multisite where network sites have their own domain name
  32. Convert a Multisite WordPress install into a Single site
  33. WordPress MultiSite Active Directory integration and site privacy
  34. WordPress Job Interview Preparation
  35. How to add Custom Blog Options to new blog setup form?
  36. How can I trust switch_to_blog()?
  37. Remove the blog slug from WordPress Multisite root node
  38. Why are my roles not visible in a Multi-site/Network?
  39. Site admin in a network install can’t edit users?
  40. How to use same email for multiple users
  41. How to run an activation function when plugin is network activated on multisite?
  42. Specific upload folder for PDFs in custom Post type in WP multisite
  43. What is the correct way to map multiple domains in a WordPress 4.1 multisite install?
  44. Where can I find documentation on what characters are allowed in user names and why?
  45. How to migrate subsite from dev multisite to production multisite
  46. How can I un-reserve a pending username registration?
  47. How do I remove/delete an old super admin user?
  48. DB connection error after copying a WordPress Multisite instance to a second location
  49. Redirect Main Site to Subsite in Multisite WordPress
  50. Is there a is_user_logged_in() for multisite?
  51. Allow user to select a theme to install when they signup
  52. Setting up a wordpress network with third level domains
  53. Get upload URL by blog ID in multisite
  54. What’s the difference between get_site_option and get_blog_option?
  55. Need help sorting “My Sites” Alphabetically
  56. How to delete post revisions?
  57. Create mobile site with same content just different theme
  58. Add additional Network constants to wp-config.php dynamically
  59. Multisite stuck at 1MB for max file size
  60. How to get blog name, when using WordPress Multisite
  61. What are options are there to implement a multi language site
  62. Switching primary site in WordPress Multisite
  63. Multisite Network Port Num Issues?
  64. Convert existing site to network
  65. Where is the robots.txt stored for a WordPress Multisite install?
  66. Settings API in Multisite – Missing update message
  67. Add WordPress MU Network Admin via Database
  68. How to get current site id? (WPMU)
  69. Multisite on Windows with wildcard subdomains
  70. Why is WordPress Multisite redirecting to wp-signup.php and how to fix it?
  71. Which asset URLs are acceptable in a “vanilla” MU install?
  72. $wpdb->base_prefix not get parent site prefix in multisite
  73. How to tell which database tables belongs to which multisite site
  74. what are pmxi tables? [closed]
  75. Using wp_insert_post() with Networking enabled
  76. Are nested subdomains possible with a subdomain multisite?
  77. Sharing Dynamic Sidebars across Multisite Blogs
  78. I want to develop locally with Multisite, then migrate each site to separate remote WP installs
  79. Password Reset for Users on a Multisite Subsite
  80. Anyone figured out how to use WordPress MultiSite with Domain Mapping & SSL?
  81. Can a multisite’s blogs be accessible from two different sub-domains?
  82. Querying posts from multiple sites in a network?
  83. Plugin for editing options on multisite?
  84. is_front_page() malfunction?
  85. WP Multisite development with Mamp Pro and wildcard subdomains, not really working for me
  86. How to share WordPress core library
  87. How do I change the Multisite URL?
  88. Create site programmatically for WPMU
  89. Can upload doc and pdf but not ppt – not permitted for security reasons
  90. How Can I Centralize Content Usage and Approval in a WordPress Multi-Site installation
  91. WordPress Multisite: Adding actions to only one site
  92. WordPress Multisite allow site admin to add user without email confirmation
  93. Domain mapping (without plugin) in 4.5.x multisite?
  94. wordpress multisite, how to keep user on subdomain throughout registration process?
  95. How will self-hosted WordPress work with Google Page Speed Service?
  96. WordPress Multisite, NGINX and WordPress Subdirectory Install
  97. Multisite Domain Mapping with SSL
  98. get_user_meta() to Return User Meta Only for Current Blog in Multi Site
  99. Basic Multisite Question – Managing Content Centrally
  100. Can I set some default pages to be created on every creation of a new blog
Hata!: SQLSTATE[HY000] [1045] Access denied for user 'divattrend_liink'@'localhost' (using password: YES)