Advertisement

12.28.2007 at 02:42AM PST, ID: 23046810
[x]
Attachment Details

How secure is an iframe to a HTTPS link on an unsecure (HTTP) page?

Asked by kalpyk22 in Secure Socket Layer (SSL) & HTTPS, Networking Security Vulnerabilities, Payment Processing Recommendation and Integrating

Tags: iframe, HTTPS, PCI

Hi,

We are in the process on making our operations PCI compliant. Currently we take web payments over the internet. Our booking engine is hosted on a secure http server using HTTPS. We would like to publish this engine on external sites as an iframe. However the content and structure of these pages would be beyond our control.

Would there be any security implications of adding an iframe to a HTTPS page on un unsecure webpage? Mainly, is there a risk of credit card information being compromised?Start Free Trial
 
Keywords: How secure is an iframe to a HTTPS lin…
Title
1 dynamic iframe as form target - loss o…
2 inline iframe
3 Javascript and the iFrame
4 How to show URL that the page in an i…
5 iframe and InnerHTML
6 IFrame - No Border
 
Loading Advertisement...
 
[+][-]12.28.2007 at 03:04AM PST, ID: 20540945

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]12.29.2007 at 03:23PM PST, ID: 20549364

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]12.31.2007 at 12:19AM PST, ID: 20553767

View this solution now by starting your 7-day free trial. Setting up your free trial is quick, easy, and secure. We will return you to this solution, unlocked, when you're done.

 

About this solution

Zones: Secure Socket Layer (SSL) & HTTPS, Networking Security Vulnerabilities, Payment Processing Recommendation and Integrating
Tags: iframe, HTTPS, PCI
Sign Up Now!
Solution Provided By: ahoffmann
Participating Experts: 3
Solution Grade: B
 
 
 
Loading Advertisement...
20080716-EE-VQP-32 / EE_QW_2_20070628