Google-maps – Google maps over https

google mapshttps

We are using Google Maps over https using a free maps API key. The Google Maps API FAQ says:

The Google Maps JavaScript API and Google Static Maps API can be
accessed over a secure (https) connection by Google Maps API Premier
customers. If the Google Maps APIs are used with a free Maps API key
on a secure site, the browser may warn the user about non-secure
objects on the screen.

My understanding of the above is that the API will work anyway, but users might get a security warning. For us, however, the map will not display at all, rendering the page completely unusable.

Does anybody know if Google is blocking use of the maps API over https with free maps API keys?

Best Answer

As of March 15th, 2011, anyone may use the API at https://maps-api-ssl.google.com/

http://googlegeodevelopers.blogspot.com/2011/03/maps-apis-over-ssl-now-available-to-all.html

Related Solutions

Google-maps – Options for Google Maps over SSL

I'd agree with the previous two answers that in this instance it may be better from a usability perspective to split the two functions into separate screens. You really want your users to be focussed on entering complete and accurate credit card information, and having a map on the same screen may be distracting.

For the record though, Virtual Earth certainly does fully support SSL. To enable it you simple need to change the script reference from http:// to https:// and append &s=1 to the URL, e.g.

<script src="http://dev.virtualearth.net/mapcontrol/mapcontrol.ashx?v=6.1" type="text/javascript"></script>

becomes

<script src="https://dev.virtualearth.net/mapcontrol/mapcontrol.ashx?v=6.1&s=1" type="text/javascript"></script>

Are HTTPS headers encrypted

The whole lot is encrypted^† - all the headers. That's why SSL on vhosts doesn't work too well - you need a dedicated IP address because the Host header is encrypted.

^†The Server Name Identification (SNI) standard means that the hostname may not be encrypted if you're using TLS. Also, whether you're using SNI or not, the TCP and IP headers are never encrypted. (If they were, your packets would not be routable.)

Best Answer

Related Solutions

Google-maps – Options for Google Maps over SSL

Are HTTPS headers encrypted

Related Topic