IE security warning (http://....https://)

Hello,

We are experiencing this security warning, but it only happens in Internet Explorer.  From the research I have done, it sounds like it has to do with some image url's not having HTTPS: on secure pages.  Is this assessment correct?  I would like to resolve the problem on the website end.  Any help or input would be appreciated.

Thank you,
Joe

uploads/1220/header.zip



Hello,

well I went through the header/footer files and renamed all http: to https:

The site seems to have slowed down quite a bit since I did this (I guess since everything is now going through https:)

Also, for whatever reason, I am still getting this IE security error - however now it is not a popup...its just a horizontal bar message (see screenshot)

Anyways, in case anybody is interested, I have posted the header/footer files in a .zip file (attached) all I did was replace the site name with 'domain.com'

Any help would be appreciated,

Thank you very much
-J

Hi Mark,

Thank you very much for your reply.  It made perfect sense and I was able to go back in and update all the links.  I actually decided to go with full URL's with 'http://...' like you suggested, so when customers go back into the store to continue shopping, they are not slowed down by the https://.

So, good news is, I got that whole issue fixed.  However I noticed another issue, but I don't know if it's related or not:

So, in IE, once the page switches over to secure (Login, Payment, etc.) I notice that I will get an error in the bottom left of the IE browser.  Here is the error:

Message: Object expected
Line: 243
Char: 1
Code: 0
URI: https://www.cctactical.com/store/pc/custpref.asp

So, I opened up custpref.asp, went to line 243, and its a simple include?:

<!--#include file="footer.asp"-->

I notice its not just limited to custpref.asp, but other asp files as well (checkout, etc). 

Does anybody know what could be causing this?  I dont get the error in FireFox. 

For reference, the site is located at http://www.cctactical.com

Any help would be greatly appreciated,

Thank you,
-Joe



Edited by BlackReefDesigns - 12-February-2010 at 11:34pm

BlackReefDesigns wrote: Also, the SSL Certificate Trust Logo appears correctly under "http://..." but when you switch over to "https://...", the SSL Trust Logo does not appear.  This happens in both Firefox and IE8.  Here is the exact code for the Trust Logo at the bottom of the page (http://www.cctactical.com) <!-- TrustLogo Html Builder Code: Shows the logo at URL http://www.cctactical.com/store/pc/tl_transp.gif Logo type is  ("SC4") undefined //--> <a href="http://www.instantssl.com" id="comodoTL">SSL</a> <script type="text/javascript">TrustLogo("http://www.cctactical.com/store/pc/tl_transp.gif", "SC4", "none");</script>

The image does not need to be loaded from the Comodo website (the rest does).  They actually have several images on their site you can download.   Don't ask me where, because it has been a while.  I downloaded the image to my server and linked to it like all the other images.  That way you don't need to make anything secure when it doesn't need it to be.