On: Writing A Persona Identity Provider

[Lukasa]

That seems likely. If you can't add StartSSL to your chain of trust, the same page can be accessed over HTTP instead of HTTPS.

[ColinWright → Lukasa]

Noted - thanks.