Shain Allen
asked on
IE and secure websites
if a "secure" webiste doesn't have the little lock icon on the bottom of IE window but the Address starts off with "https://" does it mean that the website isn't secure?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Okay, thanks. Sounds like a reasonable answer and makes sense too.
Thank you. =)
Just to add to my comment more, I found a page that has that exact behaviour...
https://www.eqo.com/
When you go to it via https, Internet Explorer gives a pop-up warning: "This page contains both secure and nonsecure items. Do you want to display the nonsecure items?"
Clicking to get more information, it shows:
-----
Downloading non-secure content from a secure Web site
The Web site you are viewing is a secure site. It uses a security protocol such as SSL (Secure Sockets Layer) or PCT (Private Communications Technology) to secure the information you send and receive.
When sites use a security protocol, information that you provide, such as your name or credit-card number, is encrypted so that other people can’t read it. However, this Web page also contains items that do not use this secure protocol.
Given what you know about this Web site and your computer, you must decide whether to continue working with this site.
If you do not feel confident about working with this site, click No.
-----
And indeed, the page does in fact have non-secure elements such as a Flash file linked from http instead of https.
Just to add to my comment more, I found a page that has that exact behaviour...
https://www.eqo.com/
When you go to it via https, Internet Explorer gives a pop-up warning: "This page contains both secure and nonsecure items. Do you want to display the nonsecure items?"
Clicking to get more information, it shows:
-----
Downloading non-secure content from a secure Web site
The Web site you are viewing is a secure site. It uses a security protocol such as SSL (Secure Sockets Layer) or PCT (Private Communications Technology) to secure the information you send and receive.
When sites use a security protocol, information that you provide, such as your name or credit-card number, is encrypted so that other people can’t read it. However, this Web page also contains items that do not use this secure protocol.
Given what you know about this Web site and your computer, you must decide whether to continue working with this site.
If you do not feel confident about working with this site, click No.
-----
And indeed, the page does in fact have non-secure elements such as a Flash file linked from http instead of https.
ASKER
very cool!!! This helps a lot
If you are seeing https but NO lock, then I'd suspect funny business and would be very cautious.