On 23/11/2010 18:41, Wilfried Woeber, UniVie/ACOnet wrote:
Iceweasel on Debian Linux does the same, btw, just checked...
That's in fact the case (mixed content) if you use https - some stuff comes from external sites (like Google Maps scripts) without https. Other browsers have more user friendly mechanisms though. Suggestions? ;-)
IceWeasel is actually de-branded Firefox, so it has the same settings -- under Preferences -> Security -> Warning Messages, the last one in the list controls this. Personally I disable all except the 'low-grade encryption' one, otherwise browsing in general is painful with lots of sites giving warnings. I know this is more of a workaround, however in the case of Atlas the 'clean' solution would involve serving all the content from just one virtual-host for SSL, and that is simply not attainable with the current architecture of the website(s). On a related note, I tested now and the login page does not automatically redirect to https:// if accessed by http://, and I think it should. That's for the security of anyone using the service... Best regards, -- Mihnea-Costin Grigore RIPE NCC Web Developer - http://ripe.net/