Possible Secure > Non-Secure Sites Bug

Discussion in 'Internet Explorer' started by cj_london, Apr 26, 2006.

  1. cj_london

    cj_london Guest

    Logging out of a secure (https) banking website, the site redirects back to
    its normal (http) homepage.

    However, IE7 B2 thinks that the redirected web page is still supposed to be
    secure, and blocks all 'unsecure content' such as JPEG pictures.

    Something that the developers need to have a look at I think

    --
    Colin

    ----------------
    This post is a suggestion for Microsoft, and Microsoft responds to the
    suggestions with the most votes. To vote for this suggestion, click the "I
    Agree" button in the message pane. If you do not see the button, follow this
    link to open the suggestion in the Microsoft Web-based Newsreader and then
    click "I Agree" in the message pane.

    http://www.microsoft.com/communitie...&dg=microsoft.public.internetexplorer.general
     
    cj_london, Apr 26, 2006
    #1
    1. Advertisements

  2. cj_london

    schlingel Guest

    The problem may be your banks servers, as I have no problem signing out or
    into mine. Https change to http upon redirect and JPEG's etc not blocked.
     
    schlingel, Apr 26, 2006
    #2
    1. Advertisements

  3. cj_london

    cj_london Guest

    All I can say is that this behaviour is not demonstrated in IE6 or Firefox,
    but is evident in IE7 Beta 2.

    It could be something to do with the way the banks web page is set-up upon
    logout (I expect it is not a simple redirect). However, the banks front page
    is a non-secure page, and I can see no obvious reason why IE7 should think it
    is meant to be secure when IE6 & Firefox do not.
     
    cj_london, Apr 27, 2006
    #3
  4. cj_london

    ecomp Guest

    The wonderful folks at MS believe that graphics are "mixed content" and
    anything mixed on a HTTPS connection is a security risk.........I have begged
    and boasted that certain graphics are NOT a security hazard and should be let
    filtered thru on a "mixed content" page........to no avail.........probably
    those graphics are connecting with the https or http protocol while the
    logout page is doing the opposite..........it sucks
     
    ecomp, May 6, 2006
    #4
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.