Thanks for the reply but that has absolutely nothing to do with my question. Obviously you would want to switch between a secure and insecure page depending on the content. All forms where a user would have to enter data would be considered sensitive and required to be secured with SSL according to PCI-DDS.
The question is why does WHMCS use a 302 redirect on pages secured with SSL. There's absolutely no reason to do a 302 (temporarily moved) on these pages.
So to help one better understand look at the header returned by the login page. WHMCS doesn't create links that have the https prefix so don't use it. Check the login page header with http://. You'll see that in order to re-direct to https WHMCS uses a 302 redirect.
This is not SEO friendly and doesn't pass juice. It should be a 301 redirect. By saying "temporary move" a 302 tells search engines to keep the old domain or page indexed, but it would be desirable for them to index the new location.
So my question remains, why does WHMCS use a 302?
