Transfer From HTTPS To HTTP JSF Pages

[Peter Cheung]

I am working on a app. has a mix of HTTPS and non-HTTPS pages. Since the browser doesn't show the URL of the current JSF page(showing 1 URL behind), when the user first gets from a HTTPS to a non-HTTPS JSF page, there is no warning (produced by the IE) about leaving HTTPS, but once they move to one more non-HTTPS page, the warning of about to leave HTTPS page appears. That is very misleading to the user. I wonder if there is any way to force the display of the URL of the current JSF page.

I also have a related problem, when the warning of about to leave HTTPS page appears, the parameters that the page previous page is passing in the CommandLink are lost. I wonder if there is any way to get around this problem. My target user are general public, so I can't ask them to lower their security level on their IE, before coming to my site. I know changing the pages to session scope may be an option, but I am hoping to keep them in the request scope.

Thanks in advance.