How to Locate Unsecured content in a Secured HTTPS page
This article explains why accessing your Evanced software via HTTPS, may still result in the browser not loading as a "Secure" page because of that page containing certain unsecure data (ex. Image files) and how to locate that unsecure data in your software.
You can learn more about the recent change in Google Chrome's browser alert messages and how the relate to HTTP vs HTTPS content here.
If the Evanced product is accessed using HTTPS and all content is secure, then a green "Secure" message will display next to the address bar and everything will display in the browser as expected.
If accessing the Evanced product using HTTPS and there is some unsecured content (or "mixed content) within the page (ex. an image that is hosted using just HTTP) then an alert message will display next to the address field in the Chrome browser but the unsecured content will still display as expected.
NOTE: Evanced software has always had forced HTTPS encryption on any and all Credit Card submission pages within all of our software offerings. The content of this article is specific to a change in how browsers (such as Google Chrome) interact with the other pages within the Evanced software.
What is unsecured data?
- When navigating within an Evanced product via an HTTPS connection, the "Secure" message may not display in the browser because not all of the content on the page is secured (also known as "mixed content"). This behavior is typically the result of an image file that is hosted on an unsecured site that uses the HTTP prefix instead of HTTPS
How do I locate HTTP content in an HTTPS page?
- Unsecured data within a page accessed via HTTPS can be located using this tool. For example, you can search for unsecure content on your SignUp calendar by loading the list view of your calendar link (be sure you are using the HTTPS version of the list view URL) in this tool as directed.
What do I do with the unsecured content found in a secured page accessed via HTTPS?
- Typically this content is hosted on a HTTP connection and you need to replace it with content that his hosted via HTTPS. For images, try and see if changing the link to HTTPS works and re-save within the Evanced software. If this change results in a broken link, it means that there is not currently an HTTPS version of the image link available, and you will need to host the image using an HTTPS connection. If you do not have that option with your library's own servers, you can move your images to a free image hosting service like imgur.com Or you can upload the images within the application itself. If your application does not support uploading images, you can send the images to us and we will host them for you.
- Applicable To: All Users
- Attachments: No
- Summary: Locating unsecured content in HTTPS
|Posted - Tue, Dec 20, 2016 at 10:51 AM. This article has been viewed 1961 times.
|Online URL: http://kb.demcosoftware.com/article.php?id=715
Powered by PHPKB (Knowledge Base Software)