For a web application located at:
With an SSL certificate issued to "www.domain.com",
What is are the proper rewrite rules, DNS settings, or combination of both which makes each of the below urls redirect seemlessly to
1. http://www.domain.com 2. http://domain.com 3. https://domain.com
The difficulty is really with #3.
https://domain.com tends to cause browser security messages. How do the major HTTPS sites do this? Take Paypal.com, for instance.