HTTPS web site deployment issue.

I have just deployed a web site i have developed (with the help of a web designer!).

When i browse to it get "Do you only want to show the content of the web page delivered in a safe manner?"

I have had to translate this from swedish...

Can someone have a look at the page and tell me what is wrong, and what the solution is?  The url is:

https://www.eyenetreg.se/test/swetrau.dll

/Richard
soozhCEOAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Emredrum76Commented:
Okay, this is a badly worded IE security box.  

Do you want to view ONLY the webpage content that was DELIVERED securely.  

The correct answer is NO.  If you say YES, then ONLY content delivered from a https: will be served.

It is windows security overkill and in the past, the answer was YES, display it.  Now, it is asking if you want them to block it, without using the word block.

So check that all the links to the page are secure

kpmartinCommented:
As Emredrum76 says, it's IE security overkill.  The warning appears because the page has content delivered by both HTTP & HTTPS; hence it asks if you only want only the secured items.  That will block a lot of images etc that are HTTP links.

To stop that message is a Browser setting: go to TOOLS - INTERNET OPTIONS - SECURITY - CUSTOM LEVEL then scroll down until you see MISCELLANEOUS - ALLOW MIXED CONTENT and click on enable, then save and exit.

or use Firefox!
Emredrum76Commented:
Here is the way the two different examples can display.  

https://www.eyenetreg.se/test/swetrau.dll will resolve to https://www.eyenetreg.se/test/swetrau.dll/EXEC
You will see the differences.

good.JPG
bad.JPG
OWASP: Avoiding Hacker Tricks

Learn to build secure applications from the mindset of the hacker and avoid being exploited.

soozhCEOAuthor Commented:
Emredrum76: Yes i can see there is a difference but i know nothing about security issues so I dont really understand what I am seeing.  

Is the message due to something on my web site and not my browser?

I have added the "help" link (top right corner) recently.. can this be the problem? and if so what is the fix?
Emredrum76Commented:
It is something on the page or the way in which the page is coded.

The issue of some unencrypted data on the page, prompts browsers to warn you.  This warning in IE is the one that you need to answer YES or NO.  In firefox, the page will just load, however the exception is noted by the red padlock.

Both browser will load the page, however, if the IE page is loaded without saying NO, then some elements of the page will not be available to the user.

If I can work out what the issue is I will post back.  On a very basic code comparison, there is alot of META HTTP in your page, which was absent in others, and also the inclusion of javascript.

It might be the Java script component "src="http://code.jquery.com/jquery-1.4.2.min.js"></script> " as this references a http within a https.

This perhpas is the warning, that FF will just flag, but IE will ask for confirmation.  I am not a coder though so I just look for links off the page that are not securely addressed.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
soozhCEOAuthor Commented:
It was an reference to some javascript via http.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Web Development

From novice to tech pro — start learning today.