[BlueOnyx:19299] Re: Wiki / MailMan not working when logged in using SSL

Jim Scott jscott at infoconex.com
Thu Mar 10 14:21:59 -05 2016


Chris,

> OR.... allow the exception in your browser?

I just tried, IE, Edge, Chrome and Firefox and all have by default the 
feature enabled that do not allow you to load unsecure data while a secure 
session is established.

Safari was the only one that allowed it to happen.

While I could definitely follow your instruction of allowing the exception 
in my browser, telling any customer who uses the site to do the same is not 
going to work.

Also I personally love that the browsers require a secure session to return 
all secure content and block anything that is not. Too many developers do 
not fully understand the implication of making mixed requests, especially if 
you end up doing so to the same domain as things like authentication 
tokens/cookies that you thought were secure are now being transmitted over 
the wire insecurely.

Here are some options that I think should be considered.

-Mailman
    - Few options
         a) Have the mailman interface open in a new browser window
            - Could possibly implement this to only happen when a secure 
connection is being used
         b) Modify web server to service mailman requests on port 81 as well
                - Remove protocol from url link so that it works from 
whatever protocol and port is being operated on

- Wiki
    - Few options
        - Obtain a secure SSL certificate for wiki.blueonyx.it
            - Setup to listen for secure requets
            - Remove the protocol from the URL so that it will work via 
http/https
        - Option in a new browser window instead when secure is being used
        - Provide option to run documentation locally instead of remotely 
and allow to be served via http/https





More information about the Blueonyx mailing list