News for hackers. Stuff that matters.

A comment on Firefox 23 will block non-SSL content on SSL pages by default. Parent comment

Re:Firefox 23 will block non-SSL content on SSL pages by def... by jonny_eh on Monday April 08, 2013 @08:28PM (#5515687)
Why not just use https:// ?

That way, if you load the file using file:// it will still work. Any downsides?

[ Parent | on HN ]
Re:Firefox 23 will block non-SSL content on SSL pages by def... by jonknee on Tuesday April 09, 2013 @12:56AM (#5516505)
You will often need to dynamically generate all URLs depending on the current state of the page. A common example is an econmerce site where normal pages are HTTP, but things like the shopping cart and checkout are HTTPS. Your template will need to know to load resources as HTTPS when on a secure page. It's not the end of the world, but certainly annoying.
[ Parent | on HN ]
Re:Firefox 23 will block non-SSL content on SSL pages by def... by Cthulhu_ on Tuesday April 09, 2013 @08:11AM (#5517553)
And are there any considerations nowadays to not just run the whole site under HTTPS?
[ Parent | on HN ]
Re:Firefox 23 will block non-SSL content on SSL pages by def... by timmow on Tuesday April 09, 2013 @09:06AM (#5517769)
Many CDNs charge a lot (10x for all bandwidth, including non secure) for https. If you are fronting one of your sites with these, it is not economically viable to switch over.
[ Parent | on HN ]