FW: Internet Explorer Security Information

Christian,

It looks like this message has something to do with the SSL certificate. I
checked with Joe Ducharme in DoIT. Can you please provide me Brian's
contact information or I can call support directly.

Thanks.

Orfa Link
Associate Director
Creighton University
402-280-2703
orfalink@creighton.edu

-----Original Message-----
From: Burk, Christian
Sent: Friday, June 27, 2008 9:07 AM
To: Link, Orfa L.
Subject: Re: Internet Explorer Security Information

Hi, Orfa,
Do we need to have this protocol for every page or just those with sensitive
information: login, registration, application checklist (perhaps)?

The problem is that the URLs for the images are determined through the CMS,
which doesn't provide the https option. I could override the default
settings every time I add a picture, which would mean adding another step
every time we place an image. This won't help, however, on pages where we
add meebo widgets or even a link to anywhere else other than our site. Those
pages will all have mixed protocols, and, therefore, this constitutes the
majority of our pages.

What concerns me about this protocol is that every single page someone opens
has this notification if you visit using IE 6 or 7, which 70% of our
visitors use. I presume that most of the people that would be savvy enough
to change their security settings would probably also be the type to use
Firefox instead of IE, anyway. Therefore, I think that most of our visitors
get this error on every page on our site.

I think we should discuss this on June 30/July 1.

Yours,
Christian
--
Christian Burk
Creighton University
Undergraduate Admissions
2500 California Plaza
Omaha, NE 68178
christianburk@creighton.edu
(402) 280-2703

> From: Orfa Link <OrfaLink@creighton.edu>
> Date: Fri, 27 Jun 2008 08:35:22 -0500
> To: Christian Burk <ChristianBurk@creighton.edu>
> Subject: RE: Internet Explorer Security Information
>
> Christian,
>
> I had requested that our site use the ssl protocol so our urls begin with
> "https" instead of "http" due to the type of data we were making available
> through AG. I believe there is a browser setting to address the security
> warning pop-ups.
> We should be using the https on any urls and image references.
>
> Orfa Link
> Associate Director
> Creighton University
> 402-280-2703
> orfalink@creighton.edu
>
> -----Original Message-----
> From: Burk, Christian
> Sent: Thursday, June 26, 2008 9:20 AM
> To: Darren Wacker; Bryon Kuehn
> Cc: Undergrad Website Issues; Link, Orfa L.
> Subject: Re: Internet Explorer Security Information
>
> Hi, Darren,
> You are probably right. It was likely something asked for by Orfa, as she
> has much more experience in data security than I do (read: any experience
> whatsoever).
>
> Were we aware of the issues this would cause when using the browser in IE?
> We may have been advised on this, but I don't remember. Also, I don't think
> the security notification was popping up at the time of launch. Do you
> recall when this started happening?
>
> Lastly, is there a way to find out what benefits this protocol provides?
> Yours,
> Christian
> --
> Christian Burk
> Creighton University
> Undergraduate Admissions
> 2500 California Plaza
> Omaha, NE 68178
> christianburk@creighton.edu
> (402) 280-2703
>
>
>> From: Darren Wacker <drwacker@jamestower.com>
>> Date: Thu, 26 Jun 2008 09:05:00 -0500
>> To: Christian Burk <ChristianBurk@creighton.edu>, Bryon Kuehn
>> <BPKuehn@jamestower.com>
>> Cc: Undergrad Website Issues <christianleftbehind.website@blogger.com>
>> Subject: RE: Internet Explorer Security Information
>>
>> Christian-
>>
>> This was a decision that was moved forward from your end, as I recall. I
>> don't remember if it was an Orfa or a Coleen thing. I would have to dig
>> through old emails to jog my memory.
>>
>> Darren
>>
>> -----Original Message-----
>> From: Christian Burk [mailto:christianburk@creighton.edu]
>> Sent: Wednesday, June 25, 2008 2:48 PM
>> To: Kuehn, Bryon P. (James Tower); Wacker, Darren R. (James Tower)
>> Cc: Undergrad Website Issues
>> Subject: Re: Internet Explorer Security Information
>>
>> Hi, Bryon,
>> Thanks for looking into this. Do we have to use the https? What are the
>> benefits? What are the drawbacks (other than the obvious one)?
>> Yours,
>> Christian
>> --
>> Christian Burk
>> Creighton University
>> Undergraduate Admissions
>> 2500 California Plaza
>> Omaha, NE 68178
>> christianburk@creighton.edu
>> (402) 280-2703
>>
>>
>>> From: Bryon Kuehn <BPKuehn@jamestower.com>
>>> Date: Wed, 25 Jun 2008 14:04:05 -0500
>>> To: Christian Burk <ChristianBurk@creighton.edu>, Darren Wacker
>>> <drwacker@jamestower.com>
>>> Cc: Undergrad Website Issues <christianleftbehind.website@blogger.com>,
>>> Bryon
>>> Kuehn <BPKuehn@jamestower.com>
>>> Subject: RE: Internet Explorer Security Information
>>>
>>> Hi Christian,
>>>
>>> After checking in with the team on this, here is what I have for you at this
>>> time.
>>>
>>> If you are using the https protocol, which you are, any http items that are
>>> referenced in the page to be loaded will throw this error, namley image
>>> sources, such as <img src=²http://www.image.jpg/> or links in the page, like
>>> <LI class=li1><A href="http://www2.creighton.edu/adultdegrees/">Adult
>>> Education</A> </LI>.
>>>
>>> This is why you are getting the error showing the page has both secure and
>>> non-secure items.
>>>
>>> I am checking in with them to see if there is anything we can do to prevent
>>> this error.
>>>
>>> Thank you,
>>>
>>> Bryon Kuehn
>>> bpkuehn@jamestower.com
>>>
>>>
>>> -----Original Message-----
>>> From: Christian Burk [mailto:christianburk@creighton.edu]
>>> Sent: Tue 6/24/2008 1:10 PM
>>> To: Kuehn, Bryon P. (James Tower); Wacker, Darren R. (James Tower)
>>> Cc: Undergrad Website Issues
>>> Subject: Internet Explorer Security Information
>>>
>>> Hi, Bryon,
>>> When visiting our website on Internet Explorer (which is the case for over
>>> 70%
>>> of our visitors), every page brings the same dialogue:
>>> This page contains both secure and nonsecure items.
>>> Do you want to display the nonsecure items?
>>> This is very annoying. I don't experience this on other university websites.
>>> Is this a problem for other AG clients? Can this possibly be changed on
>>> our/your end?
>>> Yours,
>>> Christian
>>> --
>>> Christian Burk
>>> Creighton University
>>> Undergraduate Admissions
>>> 2500 California Plaza
>>> Omaha, NE 68178
>>> christianburk@creighton.edu
>>> (402) 280-2703
>>>
>>>
>>
>

------ End of Forwarded Message