Think about it - if I made a page that was https & then had an iframe that was http from another server.... The user thinks they are getting https but in fact they are not. IE does go over the top though - anything linked will do it (images, etc..).
Cheers Mark ------------------ Mark Stanton Technical Director Gruden Pty Ltd Tel: 9956 6388 Mob: 0410 458 201 Fax: 9956 8433 http://www.gruden.com ***************************************************** The discussion list for http://webstandardsgroup.org/ *****************************************************