Jump to content
  • 0
TheHosting4You

backgrond https

Question

5 answers to this question

Recommended Posts

  • 0

It seems xat is forcing crossdomain.xml to be requested over HTTP, via the chat.swf client.

 

You will have to stop using SSL for the time being or wait until xat pushes a fix, if you want to avoid this error.

 

Note:

Your site isn't any less safe due to xat requesting crossdomain.xml via HTTP (the request is actually being blocked).

It just means some functionality may stop working (whatever the requested links are being used for).

 

Share this post


Link to post
Share on other sites
  • 0

What do you mean by "no longer safe"?
The imagizer subdomain does not get login cookies from Imageshark, it is a subdomain for images sharing.
SSL/TLS will not save you from attacks, it is just a way to authenticate the connection between the client and the server, and encrypt the text fields.

Then it does not need to be encrypted. But if this happens to any site, then they should be using https.

;)

Share this post


Link to post
Share on other sites
  • 0
On 14-3-2017 at 3:26 PM, Mega said:

What do you mean by "no longer safe"?
The imagizer subdomain does not get login cookies from Imageshark, it is a subdomain for images sharing.
SSL/TLS will not save you from attacks, it is just a way to authenticate the connection between the client and the server, and encrypt the text fields.

Then it does not need to be encrypted. But if this happens to any site, then they should be using https.

;)

 

Hello

But why do I get this error away?

 

Quote

 

Mixed Content: The page at 'https://radiozilverstream.com/chatbox.php' was loaded over HTTPS, but requested an insecure plugin data 'http://xat.com/crossdomain.xml'. This content should also be served over HTTPS.

Mixed Content: The page at 'https://radiozilverstream.com/chatbox.php' was loaded over HTTPS, but requested an insecure plugin data 'http://xat.com/web_gear/background/xat_disco.jpg'. This content should also be served over HTTPS.

 

 

 

Thanks for contributing ideas.

With kind regards

 

Share this post


Link to post
Share on other sites
  • 0

Dear,

I made the adjustment, the page works well.
The website just now https but he does not show it because these two:
Mixed Content: The page at "https://radiozilverstream.com/chatbox.php 'was downloaded over HTTPS, but requested an insecure plugin data' http://xat.com/crossdomain.xml. This content shouldering ook be served over HTTPS.
Mixed Content: The page at "https://radiozilverstream.com/chatbox.php 'was downloaded over HTTPS, but requested an insecure plugin data' http://xat.com/web_gear/background/xat_disco.jpg. This content shouldering ook be served over HTTPS.

Another error to give and the website is reported as not securely mounted and aligned.

I hope we can resolve this.

Sincerely André

Share this post


Link to post
Share on other sites
  • 0

As others have mentioned, your site shouldn't be at risk from this.

A report was passed along; hopefully this will be fixed soon and you won't see a Mixed Content warning any longer.

 

This topic is now closed.

If you have any further questions, feel free to create a new thread.

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

×

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.