All or nothing on SSL

This is a simpler approach and is recommended by various security
experts.