[ShadowAce]

Ok, so it looks like the only defence on this is to have the customer type out https? It has to be encrypted right from the get go?

It sure looks like it.

[WakeUpAndVote]

Wondering on this. Customer does http://www.company.com, it hits the proxy and is redirected to the https version. In other words it comes in on 80, and comes back 443 without user intervention. Is that doing the same thing basicly or not?