Re: [users@httpd] Firefox - 'partially encrypted' SSL

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



If there are any page resources, other than links to other websites etc then this will cause the page to be partially secured, since these are not https resources i.e. are not using a secure socket.

On 8/2/06, Declerck Michael-W30479 <W30479@xxxxxxxxxxxx> wrote:
Under 'view page info' then 'links' I have about nine different http://
links, but most of them lead away from my site.
One of links is a form submission to an intranet search database (I have
to include that because of intranet standards), and the _javascript_ for
that searching function is sourced from another site on the intranet.

I have a rewrite rule that transfers all http:// requests to https://,
but I had all my site links changed anyway.
What does the linking have to do with the partially encrypted message?
And could external _javascript_ sourcing cause a hole in the SSL
encryption?

-----Original Message-----
From: Richard Collyer [mailto:richard@xxxxxxxxxxxxxx]
Sent: Wednesday, August 02, 2006 5:25 AM
To: users@xxxxxxxxxxxxxxxx
Subject: Re: [users@httpd] Firefox - 'partially encrypted' SSL


On Wed, August 2, 2006 10:11 am, Vincent Bray wrote:
> On 8/1/06, Declerck Michael-W30479 < W30479@xxxxxxxxxxxx> wrote:
>> Any advice?
>> Does this sound like Firefox brokenness?
>> I would assume that it is my configuration that is the problem.
>
> Is this just a case of having media or frames linked in to your page
> via http:// links?

Right click --> view page info.

Search for the media that is linked by http:// and not https://

Cheers
Richard


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server
Project.
See <URL: http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux