yusufg

Facebook is mandatory requiring Canvas apps to move to using new PHP/JS SDK and use OAuth 2.0 as well as requiring the apps to be served over SSL by filling in the secure canvas url

http://developers.facebook.com/blog/post/497/

To ensure good user experience all elements in a canvas page would have to be served ove HTTPS else browsers will pop-up mixed-content warning dialogs

Chrome is moving towards blocking mixed scripting loading which is likely to impact non-SSL advertisements on a Facebook canvas page served over SSL

http://googleonlinesecurity.blogspot.com/2011/06/trying-to-end-mixed-scripting.html

Are advertising networks ready to serve creatives over SSL ?

Does anybody know of a Facebook approved advertising network which will serve ads over SSL ?

Or are developers covered by whatever license Apple worked out with Thomson

http://www.mp3licensing.com/