Showing posts with label security. Show all posts
Showing posts with label security. Show all posts

IE Security Warning for Mixed content

Internet Explorer gives a Security warning when a page with mixed content is loaded. This happens when a Secure page (HTTPS) contains resources(images/ javascript/ css/ iframes) that are not secure... meaning if the URL for a resource in a page is HTTP then IE gives the below warning.


"This page contains both secure and nonsecure items. Do you want to display the non-secure items?"


This warning message is very annoying if it appears for every page. The solution for this is to check the pages for non-secure urls and convert them to secure. The best is to always use relative URLs where possible.

What we also observed is that 'about:blank' url loaded in an IFrame of a secured page also gives the same warning. Solution for this is to create a blank.html in the server with a blank page and load this as the default url in the iframe.

MITM

I 've learnt today about MITM. MITM stands for Man-in-the-Middle. This is a kind of Attack done by Hackers.

In lay mans terms... In this attack the Man in the middle of two communicating parties impersonates each to the other without them knowing. The two communicating parties think that they are talking directly to each other.

You can read more about MITM from the below links.