Facebook is mandatory requiring Canvas apps to move to using new PHP/JS SDK and use OAuth 2.0 as well as requiring the apps to be served over SSL by filling in the secure canvas url<p>http://developers.facebook.com/blog/post/497/<p>To ensure good user experience all elements in a canvas page would have to be served ove HTTPS else browsers will pop-up mixed-content warning dialogs<p>Chrome is moving towards blocking mixed scripting loading which is likely to impact non-SSL advertisements on a Facebook canvas page served over SSL<p>http://googleonlinesecurity.blogspot.com/2011/06/trying-to-end-mixed-scripting.html<p>Are advertising networks ready to serve creatives over SSL ?<p>Does anybody know of a Facebook approved advertising network which will serve ads over SSL ?