Sponsored Link

Security warnings on DRI website pages

0 Members and 1 Guest are viewing this topic.

Offline daviddwells

  • Full Member
  • ***
  • Posts: 230
  • Karma: +1/-0
    • View Profile
Security warnings on DRI website pages
« on: June 08, 2010, 11:26:32 »
If you're running IE8, you may well be getting security warnings on every page of the website. This is due to poor website design on the part of DRI, but it is easy to stop the warning being displayed:

   1. Go to Tools -> Internet Options -> Security
   2. Select the Security tab
   3. Click the Custom Level button
   4. In the Miscellaneous section change Display mixed content to Enable


For those that are interested (and particularly for the DRI web designers) here are more complete details as to why it happens and what should be done at the design stage to prevent it happening:

Quote:
If you are developing a web site you cant expect your visitors to do this. It is better to fix the cause of the problem so that the warning is not displayed by default in IE 8. The only way to do this warning is to ensure that your HTTPS pages only access embedded resources using the HTTPS protocol. You can do this by following these steps:

1/
Use a sniffer like HttpWatch that supports HTTPS and shows files being read from the browser cache. The free Basic Edition is sufficient for this because you only need to see the URLs being accessed.

2/
Access the page causing the problem and click No when you see the security warning dialog.

3/
Any HTTP resources shown in the HttpWatch window are the source of the problem; even if they loaded directly from the browser cache and didnt cause a network round trip.

HttpWatch can be obtained for free from:
http://www.httpwatch.com/download/ [nofollow]

The offending resurce on the DRI website is this Java Script:
http://ajax.googleapis.com/ajax/libs...uery-ui.min.js [nofollow]

Regards
__________________
David and Sally Wells
 

Offline Mavo

  • Moderator
  • Hero Member
  • *****
  • Posts: 6276
  • Karma: +51/-55
    • View Profile
Security warnings on DRI website pages
« Reply #1 on: June 08, 2010, 12:21:57 »
Hi David
 I do not use IE so have not experienced the problem but I am sure that many others have.

I note from a post elsewhere that one member at least has the belief that it should be up to DRI to have recognised and sorted the problem out themselves.
 My view is slightly different.
Microsoft among others expect us to notify them of problems in their systems and help them to sort those problems out. So why not DRI ? After all we are helping ourselves by doing so. Win, win for company and membership alike and it does not matter who comes up with solutions as long as it moves things forward.
 I am sure that DRI and all the members using IE are grateful for your imput and positive solution.
 Best regards Tom
tomeluk