[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now


IE and secure websites

Posted on 2006-05-14
Medium Priority
Last Modified: 2011-08-18
if a "secure" webiste doesn't have the little lock icon on the bottom of IE window but the Address starts off with "https://" does it mean that the website isn't secure?
Question by:ronfast
  • 2
  • 2
LVL 32

Expert Comment

ID: 16678125
It's unclear to me what's going on.  Normally when you're connected via https you will get the lock icon.  If you click on the icon it should display the credentials (i.e. the security certificate) of the remote site.

If you are seeing https but NO lock, then I'd suspect funny business and would be very cautious.
LVL 10

Accepted Solution

ISoul earned 1000 total points
ID: 16678777
Well... yes and no.

What will cause this is if there is some element on the page that isn't secure... such as a picture hardlinked to a http address instead of a https address. I think the information that you submit should still be secure and encrypted and all that.

Author Comment

ID: 16683416
Okay, thanks. Sounds like a reasonable answer and makes sense too.
LVL 10

Expert Comment

ID: 16685673
Thank you. =)

Just to add to my comment more, I found a page that has that exact behaviour...


When you go to it via https, Internet Explorer gives a pop-up warning: "This page contains both secure and nonsecure items. Do you want to display the nonsecure items?"

Clicking to get more information, it shows:

Downloading non-secure content from a secure Web site

The Web site you are viewing is a secure site. It uses a security protocol such as SSL (Secure Sockets Layer) or PCT (Private Communications Technology) to secure the information you send and receive.
When sites use a security protocol, information that you provide, such as your name or credit-card number, is encrypted so that other people can’t read it. However, this Web page also contains items that do not use this secure protocol.
Given what you know about this Web site and your computer, you must decide whether to continue working with this site.

If you do not feel confident about working with this site, click No.

And indeed, the page does in fact have non-secure elements such as a Flash file linked from http instead of https.

Author Comment

ID: 16685910
very cool!!! This helps a lot

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

WARNING:   If you follow the instructions here, you will wipe out your VTP and VLAN configurations.  Make sure you have backed up your switch!!! I recently had some issues with a few low-end Cisco routers (RV325) and I opened a case with Cisco TA…
In this article, the configuration steps in Zabbix to monitor devices via SNMP will be discussed with some real examples on Cisco Router/Switch, Catalyst Switch, NAS Synology device.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

873 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question