I am a newbie in Spring based web development.
Our site is Spring based and is currently http based (so quite insecure). Since, the site is not live yet, we are send
Spring is not 100% responsible for configuring SSL. For that you need to configure the container (jetty, tomcat, etc) to handle SSL.