Jump to content


Issue Information

  • #000018

Issue Confirmations

  • Yes (0)No (0)
Photo

Version image at manager causes warning if used under SSL connection

Posted by mvaldez on 14 March 2010 - 11:02 AM

If the Etomite manager is loaded under a SSL connection (https), the version checker image downloaded from www.etomite.com/status/ (as version.subversion.gif) causes the browser to display a warning (a dialog or an icon) and turns off all secure-connection indicators (the padlock icon and/or colored bar). After the first warning, all the session is no longer considered secure by the browser.

Tested with Firefox (3.5.8), Internet Explorer (7.0.x), and Opera (10.10).

This may seems harmless as the whole session is still encrypted, but common users get puzzled, annoyed (by IE because it uses a dialog) and distrustful of the server security.

As the version checker image is hardcoded in manager/actions/static/welcome.static.action.php the only workaround is to delete the related HTML code.


It would be nice if:

There would be an option to disable this feature,

or

A different approach were used to check if the current version is the latest (for example, making the check server-side and caching the result).


Regards,

MV

Updating status to: In Progress
Updating severity to: 3 - Medium

This issue will be reviewed and prioritized accordingly...





0 user(s) are reading this issue

0 members, 0 guests, 0 anonymous users