SSL/NonSSL Mixed Mode PLEASE!!!!!!!!

[yitc]

Hi Varun,

I know I have asked before and there is a Bug Task #574 there but this doesn't seem to getting anywhere so can you please work on getting eSupport working in both SSL & NonSSL modes together.

At this time you can either use one of the other cause the code does not support running in a mixed mode enviroment.

Mostly I only use the http:// for most things but at times and to ease the mind of the client I would like them to use the https:// when entering secure information.

As mention above you can only either run one or the other as if you switch to ssl mode then try to access the normal http:// you will be missing content and the site is unusable.

Regards, Chris

[ehoffman]

I am not sure I understand this.

I have my support suite registered as https://support.whatever.com.

When I go to the site as http:// all is fine, and when I go as https:// all is fine. So mixed works if you set the suite to the higher security level as its default path. This is in IE at least. I would like to see if I can replicate in case it happens to my customers!

Then Live Support buttons on other sites under SSL work too!!

[Digital Mayhem]

Originally Posted by ehoffman

I am not sure I understand this.

I have my support suite registered as https://support.whatever.com.

When I go to the site as http:// all is fine, and when I go as https:// all is fine. So mixed works if you set the suite to the higher security level as its default path. This is in IE at least. I would like to see if I can replicate in case it happens to my customers!

Then Live Support buttons on other sites under SSL work too!!

ya you can go too http://support.whatever.com and will appear fine but once you click a link/button or login its gonna automaticly switch over too https://support.whatever.com so your not actually in mixed mode cause only thing that is loading insecure is the homepage.

[ehoffman]

aye, gotcha. Guess I don't see the issue as SSL these days doesn't really slow anyone down, at least you get both options that way. Sorry my question didn't help your answer Chris.

[yitc]

The other problem is if you select http:// in the options then go to the https:// it doesn't display the yellow padlock on the bottom of the browser to indicate the site is secure.

Althought if you double click where icon would normally be the secure certificate information will display but most people won't know to look there an assume the site it not secure.

[darkhorse]

It doesnt show the lock becuase not all of the elements on the page are secure.
What is happening is the page itself is secured but the resources it pulls (ie: images, css, etc) are probably not as they are called by their full path (http://support.domain.com/resource.foo)

It would need to be writen into the code to support both SSL and Non-SSL pages fully.