Does Facebook only support HTTP or does it have HTTPS also?
Does Facebook provide an SSL/TLS interface?
facebook;security;ssl;https
As of July 2013, Facebook is https by default:We now use https by default for all Facebook users. This feature, which we first introduced as an option two years ago, means that your browser is told to communicate with Facebook using a secure connection, as indicated by the https rather than http in [the URL]However, the http interface remainsSome mobile phones and mobile carrier gateways don't fully support https. While we're working with the vendors of these products, we didn't want to leave https off entirely for affected users.This is regrettable because it leaves possible the sslstrip attack whereby a man-in-the-middle rewrites https links to http, and serves a similar looking page at the http url. The solution is the HSTS header which tells the browser to always use https for a given site.