Subject: | use_ssl option should be removed in favor of "protocol relative" API_SERVER URL |
Date: | Sun, 27 Apr 2014 05:33:31 +0000 |
To: | "bug-Captcha-reCAPTCHA [...] rt.cpan.org" <bug-Captcha-reCAPTCHA [...] rt.cpan.org> |
From: | "Black, Steven Wayne" <blacks [...] iu.edu> |
Instead of having an option to "use_ssl", the API_SERVER URL should be "protocol relative."
For a protocol relative URL, you can just drop the "http:" from the "API_SERVER" address (and you can drop the "API_SSL_SERVER" value.)
This allows the same display code to work whether or not it is accessed through SSL.
I've tested this, and it works great. It means developers don't need to care whether their application is running over SSL or not.
This change would break the links when accessed through a protocol other than http or https. Since this code is used by CGI applications, though, I can't think of a use-case where this would be an issue. (If it were, it would be easy to add an optional parameter to override the protocol.)
Cheers,
Steven Black