[thelist] SSL Site redirection message

Ken Schaefer ken at adOpenStatic.com
Thu Oct 30 18:05:41 CST 2003


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
From: "Sam Carter" <sam at nativeintelligence.com>
Subject: [thelist] SSL Site redirection message


: I've added SSL / https:// to a login page.  IE gives a pop-up warning to
: users "They may be redirected to a non secure" site after login.
:
: Is there a way to provide secure login, then transition / redirect to the
: site content that's not secure without an IE pop up?
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Yes. Most sites that I've seen use javascript: window.location.replace()

You can verify this yourself by going to anyone of the sites out there (MSN,
Hotmail, Yahoo etc) where you use SSL to signin, then get redirected later
to the non-SSL content. Disable all scripting in your browser and have a
look at the source of what get's sent to you.

Cheers
Ken

Microsoft MVP - Windows Server (IIS)



More information about the thelist mailing list