Thanks to all who have reponded thus far....

The IFrames in question are hidden IFrames used to make the page dynamic.
The pages being loaded into the IFrames are from the same sever, and most
times from the same directory as the Parent page.  That said, whe MIGHT have
some references to HTTP instead of HTTPS - we're digging into this.  For the
most part we use a reference to our BaseURL which is declared in
Application.cfm - so once application.cfm was changed, the pages should have
been fine.  We're looking for hardcoded values though...

I'll pass on the links for SSL accelleration to our Sys Admin.  Thanks Dave.

Shawn

-----Original Message-----
From: Dave Watts [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 11, 2002 10:32 AM
To: CF-Talk
Subject: RE: SSL Questions


> What we are seeing is that once SSL has been configured on 
> the server (the app is the only thing on that web server) 
> we start getting prompted with "This page contains secure 
> and non-secure elements" for every page we load. However 
> this only happens to a couple of our test workstations.
> 
> Any ideas on how to fix this? Right now, we're thinking it 
> might be our use of IFrames but can't be sure.

That's probably a good place to start looking. You simply have to ensure
that every request uses HTTPS. I think you can check this easily in Mozilla
by using the "Page Info" menu option under the "View" menu. I don't know if
there's something similar in IE, off the top of my head.

> Also, once we implemented the SSL, the entire site slowed 
> down to a crawl. Any tips on this?

Yes. Use hardware SSL acceleration:
http://www.sonicwall.com/ssl-center/ssl-acceleration.html
http://www.rainbow.com/products.html

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
voice: (202) 797-5496
fax: (202) 797-5444


______________________________________________________________________
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to