Re: ASP.NET & SSL

From: Ken Schaefer (kenREMOVE_at_THISadOpenStatic.com)
Date: 02/11/04 

Date: Wed, 11 Feb 2004 23:00:45 +1100

Hi,

To avoid the warning you need to either:
a) change the browser settings (not possible if you do not control the
browser)
    -or-
b) all resources in a webpage (eg images, CSS, external javascript files,
flash files) need to be referenced using HTTPS not HTTP. So if you have:

<img src="http://www.myserver.com/image.jpg">

you will get an error you see. You need to use:

<img src="/image.jpg">

Cheers
Ken

"Curia Damiano" <curiad@euroforex.com> wrote in message
news:bbcb01c3ec99$9572b560$a501280a@phx.gbl...
: I have an app in C#/ASP.NET 1.1 on a Win2003 server.
: Now I'm trying to make it use SSL, so I requested and
: installed a server certificate to IIS.
: But now I have some questions:
: 1) if I force my web-site to use SSL, and I request a page
: via SSL, in IE a warning appears telling that the page
: contains protected object and non protected object, but
: how is it possible, if I force https? How can I make this
: warning disappear?
: 2) I would like to force https to all my objects; for
: example I'd like images, css, javascript and plain htm to
: be trasmitted not crypted. So I thought of using an
: HttpHandler that redirect http calls of aspx/asmx to https
: and https calls to other object to http. Is it possible?
: Or there is a better solution to this optimization?
: Thanks, Damiano Curia

Relevant Pages

  • Re: security warning with https
    ... Is there any legitimate way to remove this security warning... ... > this is because you have links to http and https content on the same page. ... >> I've integrated my ASP.NET website with a portal on web. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: masterpages and secure and nonsecure items warning
    ... To get rid of the warning all items need to be retrieved via https. ... can I get rid of the "This page contains both secure and nonsecure ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: https html parsing
    ... Note that in order to talk to a https server, you will need net/https ... a warning like this when i try to access https sites: ... warning: peer certificate won't be verified in this SSL session ...
    (comp.lang.ruby)
  • Re: OWA Using SSL
    ... "Protecting the world from PSTs and brick backups!" ... https gets warning about site trust, but when you say yes it gives "page ...
    (microsoft.public.exchange.admin)
  • Re: SSL
    ... > 1) if I force my web-site to use SSL, and I request a page via SSL, in IE a> warning appears telling that the page contains protected object and non> protected object, but how is it possible, if I force https? ... > 2) I would like to force https to all my objects; for example I'd like> images, css, javascript and plain htm to be trasmitted not crypted. ... > Thanks, Damiano Curia ...
    (microsoft.public.dotnet.framework.aspnet.security)
Quantcast