https : What pages to secure?

Question

I have multiple pages in my site. Few pages handling payment transaction. Few pages not. I secured the Payment transaction page with https.

Any other page should I have to secure. For eg. Login, registration etc..?

Answer 1

Ideally, you need https for login, change password, register, profile pages where user enters/views sensitive information in addition to payment pages.

Note: you need https for entire checkout process. Most gateways like PayPal Payments Pro won't even let you use without https.

However, you do not want to use https on entire site without necessary. Otherwise, it'll slow down the server due to encryption.

For example, amazon.com only use http on regular product pages unless you view or edit your account.