You should be able to have your community configured so that you can make the /sessions/login call over HTTPS. If it's not already configured to do so, I would recommend filing a support case to have it set up.
So the rest of the site would remain http and only certain parts of the site, like login can be accessed over https? Because I've tried using https://<community url>/restapi/vc//authentication/sessions/login?user.login=<user name>&user.password=<password> and I'll get an error. But it sounds like this is simply a configuration issue?
Hi eyee
what kind of error are you getting? A certificate error? If this is the stage website, it may be that SSL has not been enabled there, if it's production I suggest raising a Support case to get it looked at.
In terms of SSL setup, we can configure it to be off for all pages, enabled for PII pages or force the entire community over SSL. We can also configure the APIs to be served over SSL (as DougS already suggested).
Regards,
