Xmail Forum In SSL Mode

Hi!

I have setup Xmail Forum to run in SSL mode only with self-signed certificate. This is a small step to secure forum from possible attacks or password steel.

Hi,

Is it realy needed to run in SSL mode ?
Don't know about other people but I get on every forum post
I click on a warning. Realy not do-able to keep clicking the Yes
button on every item.

Warning message is:

This page contains both secure and nonsecure items.
Do you want to display the nonsecure items.

I think it is the site meter at the upper right corner that I keep getting these warnings about. but those are verry anoying..

Indeed they are, I can't find any option in IE to disable the warning message. I think it's indeed the visitor-counter. Maybe run something like webalizer for the stats?

Yes, it is a counter. I use Mozilla so I can disable these kind of warnings.

To disable this in IE:

• Open the Tools Menu and select Internet Options
• Click the Security tab
• Click Custom Level
• Near to the end of the list you'll find *Display Mixed Content*
• Click Enable

I think we should offer both SSL and none-SSL. There are still alot of IE users out there. Experience shows that users don't adapt their browsers, they just keep away from a site wich produces permanent popups ...

Well this is not possible due to the settings in the forum so you can use non SSL or SSL but not both so I choose SSL. For other users who still use IE - maybe it is a time to test drive Mozilla Firefox.

The warning in IE is there fore a very good reason, and shouldn't just be disabled because one of your favourite websites begins to irritate during use.

I do use Firefox, at home, but in the office, I can't just install anything on the PC and am forced to use IE.

Some consideration is needed to make a site useable and appealing, and as hschneider says, people will move away because of the irritation.

I am minded to question what value the sitemeter has, once a forum becomes popular, we all know it gets lots of visitors. Either that or perhaps you could implement your own counter, from the same SSL secured site?

Regards,

Jobber

The counter can be neglected - we should delete it.

It's more important to get new users. If we make the forum uncomfortable we will loose users and get less new ones.

I would also kick a forum that wants me to install a new browser ...

Security is surely a good thing, but it should not play a bigger role than comfort in a forum's context. It's up to the users to use other passwords than they have for their banking account. So with a hacked password no more damage than posting crap can be done ....

Then BYE,BYE counter
You have just been erased

Thanks master !

Sasa - thank you - much better

I'm still getting the warning message box though, and I think it might have something to do with this image - http://xmail.marketmix.com/shared/xhead.gif

Harald - there is no easy way of putting this, but it seems it's the icon you have in all your postings

Is there a way that these personal icons can be sourced from the same SSL secured site?

Kind regards,

Jobber

Oops ... done!

Excellent - thanks Harald - this thread is now working like a dream again, not checked others yet!

To all users who host their own avatar images: Please edit your profile and upload them to the forum server !