title: Force HTTPS on entire website plus content, but allow HTTP for several items
body: <p>I have a website located here: <a href="https://www.virginiaseo.org" rel="nofollow">https://www.virginiaseo.org</a></p>
  
  <p>I use a Wordpress plugin, which forces all content to be over HTTPS. Without this plugin, I get the little yellow mixed content sign, which is less than desirable. This plugin forces every page including admin to be on HTTPS.</p>
  
  <p>Here is the plugin page: <a href="http://wordpress.org/plugins/wordpress-https/" rel="nofollow">http://wordpress.org/plugins/wordpress-https/</a></p>
  
  <p>I also use .htaccess rules, and include one to force HTTPS. Here is the rule:</p>
  
  <pre><code>&lt;IfModule mod_rewrite.c&gt;
  RewriteEngine On
  RewriteCond %{SERVER_PORT} 80
  RewriteRule ^(.*)$ https://www.virginiaseo.org/$1 [R=301,L]
  &lt;/IfModule&gt;
  </code></pre>
  
  <p>This all works great, except for a couple of resources I can't get over http which are needed by third party crawlers and applications. A prime example is: robots.txt</p>
  
  <p>How can I make robots.txt accessible over http while not messing up everything else on the site.</p>
  
  <p>Also, the HTTPS configuration with the plugin is less than prime, but it seems the only way to FORCE HTTPS on my entire site. I am concerned with duplicate content issues and such by having it available on http at the same time. I am open to any suggestions about my setup, and thanks in advance! </p>