Half Secure, Half Not?

[James_CA]

Hi,

I am currently testing an e-commerce site. It includes an order form that sends all of the data to an e-mail address. By putting the form on a secure server I thought all data entered on the form would also be secure. Not So. On Submit the user gets a warning message. Clicking on the "More Info." button gives me the following....
.
Downloading non-secure content from a secure Web site

The Web site you are viewing is a secure site. It uses a security protocol such as SSL (Secure Sockets Layer) or PCT (Private Communications Technology) to secure the information you send and receive.
When sites use a security protocol, information that you provide, such as your name or credit-card number, is encrypted so that it can’t be read by other people. However, this Web page also contains items that do not use this secure protocol.
Given what you know about this Web site and your computer, you must decide whether to continue working with this site.

If you do not feel confident about working with this site, click No.
......

Any ideas on how I can make it ALL secure and more importantly, get rid of the warning?

Thanks in advance,

James

I think the problem is that you have some images, etc. from the regular non secure server on the secure web page, triggering the error. Be sure that the non secure server is not referenced anywhere on the secure web page except for hyperlinks.

[Rick Leinecker]

You can use the IIS console to set the questionable content (the content that is not secure) locations to use SSL authentication.

The downside here is that any other access to this content will slow down. You'll also have to change http:// to https:// when you reference the secure documents.

Aaargh! If you have them use an SSL page, then all their stuff will be encrypted, but if you have it then EMAIL that information somewhere - anyone can read it!!!!

The insecure items the message is referring to probably means that the images on the page are not coming from the secure server.