We have just rolled out SSL encrytion on Statvoo which means:

  • Event data is saved over a secure channel
  • Authentication is done automatically
  • All our user’s login information can not be cached over proxies
  • Https sites can now use the service as well

Moving to SSL was a big step for us since it meant all data between the browser and our servers is encrypted in transit. Before this, any analytics data or login credentials could theoretically be intercepted on public networks. The migration required updating all internal API endpoints to use HTTPS and making sure mixed content warnings didn’t break the tracking scripts on customer sites. If you’re still running a service over plain HTTP, the switch is worth it — browsers are increasingly flagging non-HTTPS sites as insecure.