none
mixed HTTPS and HTTP links

    Question

  • a few days ago all the URL had been changed from http:// to https://.

    unfortunately some forum contaiin reference to http URL - eg. Visual Studio / TFS forums reference Visual Studio logo using http - resulting in warning on some browser when loading the page as a https page does contain unsecure link via http.

    the complete navigiation bar is using http generating the warning too.

    Please fix the unsecure reference.

    On the other side, what is the reason to switch from http to https for the forum ?


    Please use Mark as Answer if my post solved your problem and use Vote As Helpful if a post was useful.


    Saturday, October 11, 2014 6:50 PM

Answers

All replies

  • I'm no browser expert, and I didn't notice the change in the url's, but this could account for some of the strange behavior we have seen the last few days. I have no idea why it changed.

    I looked at a few posts with http: urls and they seem fine to me. I tried IE 9, IE 11, and Firefox. Perhaps a browser setting is relevant


    Richard Mueller - MVP Directory Services

    Saturday, October 11, 2014 7:25 PM
    Moderator
  • hi Richard

    browse to the Visual Studio Team Foundation Server forum.

    As described not all browser show the warning by default as you need to set the option to warn if pages contains encrypted and unencrypted content mixed.

    At least Mozilla based browser do have that option and display a warning if the option is set.

    FireFox displays a different FavIcon - exclamation - when mixed content is displayed, you can click on the FavIcon and read the warning.

    Here's an interesting blog article about http & https mixed content and why to avoid it Internet Explorer 9 Security Part 4: Protecting Consumers from Malicious Mixed Content


    Please use Mark as Answer if my post solved your problem and use Vote As Helpful if a post was useful.



    Sunday, October 12, 2014 8:52 AM
  • What's the mixed content? Both this forum and the VSFS forum use https now.

    Ed Price, Azure & Power BI Customer Program Manager (Blog, Small Basic, Wiki Ninjas, Wiki)

    Answer an interesting question? Create a wiki article about it!

    Thursday, November 20, 2014 12:50 AM
    Owner
  • What's the mixed content? Both this forum and the VSFS forum use https now.

    Ed Price, Azure & Power BI Customer Program Manager (Blog, Small Basic, Wiki Ninjas, Wiki)

    Answer an interesting question? Create a wiki article about it!

    Hi Ed,

    Here's a few example threads that I was able to find in my old tabs that show an issue (that I should have closed a long time ago, but I'm a tab packrat...):

    https://social.technet.microsoft.com/Forums/en-US/2e858534-048a-4f7e-935a-47c2a6e394f7/extra-blank-lines-when-posting-a-singleline-code?forum=reportabug

    https://social.technet.microsoft.com/Forums/scriptcenter/en-US/e08b9b43-48ae-4d7b-845e-54e3be2adaad/is-it-possible-to-using-powershell-unzipping-force-yes-to-all-rename-dont-overwrite-existing?forum=winserverpowershell

    My guess is that this happens with threads that have images from before the switchover.


    Don't retire TechNet! - (Don't give up yet - 13,085+ strong and growing)

    Thursday, November 20, 2014 3:11 AM
    Moderator
  • What's the mixed content? Both this forum and the VSFS forum use https now.

    @Ed

    than your using a different forum :-)

    navigate to Visual Studio Team Foundation Server forum as written in my first post.

    look at the source code of the web site:

     <nav class="header-nav">
        <ul class="header-nav-pri">
              <li><a href="http://msdn.microsoft.com/en-us/vstudio/aa718325.aspx" title="Home">Home</a></li>
              <li><a href="http://code.msdn.microsoft.com/vstudio" title="Samples">Samples</a></li>
              <li><a href="http://msdn.microsoft.com/en-us/vstudio/jj672990.aspx" title="Languages">Languages</a></li>
              <li><a href="http://visualstudiogallery.msdn.microsoft.com/" title="Extensions">Extensions</a></li>
              <li><a href="http://msdn.microsoft.com/en-us/library/vstudio" title="Documentation">Documentation</a></li>
              <li><a href="http://social.msdn.microsoft.com/forums/vstudio/en-us/home?category=visualstudio%2cvslanguages%2cvstfs%2cnetdevelopment%2cvsarch" title="Connect">Connect</a></li>
    

    and you will see many plain http URL used by the navigation.

    Using sensivite security settings in the browser gives warning about mixed content leading to some unnecessary potential security risk.


    Please use Mark as Answer if my post solved your problem and use Vote As Helpful if a post was useful.

    Thursday, November 20, 2014 5:24 PM
  • What's the mixed content? Both this forum and the VSFS forum use https now.

    @Ed

    than your using a different forum :-)

    navigate to Visual Studio Team Foundation Server forum as written in my first post.

    look at the source code of the web site:

     <nav class="header-nav">
        <ul class="header-nav-pri">
              <li><a href="http://msdn.microsoft.com/en-us/vstudio/aa718325.aspx" title="Home">Home</a></li>
              <li><a href="http://code.msdn.microsoft.com/vstudio" title="Samples">Samples</a></li>
              <li><a href="http://msdn.microsoft.com/en-us/vstudio/jj672990.aspx" title="Languages">Languages</a></li>
              <li><a href="http://visualstudiogallery.msdn.microsoft.com/" title="Extensions">Extensions</a></li>
              <li><a href="http://msdn.microsoft.com/en-us/library/vstudio" title="Documentation">Documentation</a></li>
              <li><a href="http://social.msdn.microsoft.com/forums/vstudio/en-us/home?category=visualstudio%2cvslanguages%2cvstfs%2cnetdevelopment%2cvsarch" title="Connect">Connect</a></li>
    

    and you will see many plain http URL used by the navigation.

    Using sensivite security settings in the browser gives warning about mixed content leading to some unnecessary potential security risk.


    Please use Mark as Answer if my post solved your problem and use Vote As Helpful if a post was useful.

    Great detail!

    I imagine this is an issue on all MSDN and TechNet forums?

    Thanks!


    Ed Price, Azure & Power BI Customer Program Manager (Blog, Small Basic, Wiki Ninjas, Wiki)

    Answer an interesting question? Create a wiki article about it!

    Thursday, November 20, 2014 8:27 PM
    Owner
  • Not an issue here.

    I'm guessing this mixed usage is only a problem on the "branded" forums that unify on a brand, like VS in this example.


    Ed Price, Azure & Power BI Customer Program Manager (Blog, Small Basic, Wiki Ninjas, Wiki)

    Answer an interesting question? Create a wiki article about it!

    Thursday, November 20, 2014 8:31 PM
    Owner
  • Good. I submitted this as a bug request.

    Thanks!


    Ed Price, Azure & Power BI Customer Program Manager (Blog, Small Basic, Wiki Ninjas, Wiki)

    Answer an interesting question? Create a wiki article about it!

    Thursday, November 20, 2014 8:34 PM
    Owner