... but here's a tip from a colleague.
"make sure the customer does not have
two internet site docs, one for ssl and one for normal http, in that case
he would have to enable the data service for both sites. In the ssl
case we take the ip address the connection came in on and use that to look
up the site (we do not use the host header/name), one can specify two sites
one with a host name (http) and a separate one for ssl."