kumar303/zamboni — comment on commit 5c6f3a959bba99f8bd85411c6b7f48567ec607af
File: apps/devhub/templates/devhub/payments/in-app-config.html line 23
By kumar303:

In production we probably want to use SSL but we could maybe be lax about it since the blob of data is encrypted already. However, in the future we may want to make https:// configurable so that people can use non SSL urls in a sandbox for testing in-app payments. There are a lot of things we still need to work out about sandboxing though. I'm taking the easy way out for now, assume we are requiring SSL.