Thank you very much Hidde. I have indeed realized the issue you are pointing out.
IE had a nice explicit message too. So It was now pretty clear to me that the browser could not reliably display that you were surfing on a secure site while a part of the page was non-secure. It makes sense of course. Now I am going one step back. I don't really need the whole site to be secure, mainly the login page. My only concern is that there might be a warning from the browser after leaving the secure login page. Will there be one? Many thanks. Nicolas. 2012/9/10 Hidde Boomsma <[email protected]> > Dear Nicolas, > > Including content from a non secure website in a secure website will at > least lead to warnings about insecure content in all major browsers. The > only way around this problem is to also use https for the APE server. For > cross domain inclusions the same limitations apply. In some browsers it > might be possible to work your way around this by using websockets, this > however is not compatible with older browser versions. > > If you would decide to secure the APE it might be beneficial to look into > stunnel. A howto can be found at: > http://www.ape-project.org/wiki/index.php/SSL_with_ape. > > Sinserely, > > Hidde Boomsma > Software Engineer > Hostnet B.V. > http://www.hostnet.nl > > ----- Oorspronkelijk bericht ----- > Van: "Nicolas" <[email protected]> > Aan: [email protected] > Verzonden: Zondag 9 september 2012 21:58:12 > Onderwerp: [APE Project] Simple SSL question > > Hi, > > > I am trying to implement SSL on my website, but I do NOT need it for APE. > > > Is it possible to mix https website with APE and if so do you need to use > transport method 2? (in other words, from secure to non-secure is it > cross-domain?) > > > I currently receive this error: > > > Unsafe JavaScript attempt to access frame with URL > https://www.domainname.com/index.php from frame with URL http://0.staging. > domainname .com/?[{%22cmd%.... Domains, protocols and ports must match. > > > > > -- > You received this message because you are subscribed to the Google > Groups "APE Project" group. > To post to this group, send email to [email protected] > To unsubscribe from this group, send email to > [email protected] > For more options, visit this group at > http://groups.google.com/group/ape-project?hl=en > --- > APE Project (Ajax Push Engine) > Official website : http://www.ape-project.org/ > Git Hub : http://github.com/APE-Project/ > > -- > You received this message because you are subscribed to the Google > Groups "APE Project" group. > To post to this group, send email to [email protected] > To unsubscribe from this group, send email to > [email protected] > For more options, visit this group at > http://groups.google.com/group/ape-project?hl=en > --- > APE Project (Ajax Push Engine) > Official website : http://www.ape-project.org/ > Git Hub : http://github.com/APE-Project/ > -- You received this message because you are subscribed to the Google Groups "APE Project" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/ape-project?hl=en --- APE Project (Ajax Push Engine) Official website : http://www.ape-project.org/ Git Hub : http://github.com/APE-Project/
