IE Security Warning

Most of time I am using Firefox, so I just found that the checkout page of my company's website has a problem in IE today. We bought the SSL certificate, so it is start with 'https.' However, when the page loaded in IE, it prompts,

This page contains both secure and nonsecure items. ...

For user, the solution is that changing IE securtiy setting to display mixed content. Internet Options -> Security -> Custom level -> Enable Dispaly mixed content (in the middle of settings box, took me some time to find it :-))

By default, IE prompts when it see a mixed content page, so for developer, solution is to fix it other than telling user how to change the security settings. How? The reason of this warning is that in the page has both 'https" and "http" links, for example, some images links using 'http'. So changing those "http" links to "https" will fix it, at least in my case.

Updated: (3/16/09)

Actually it depends on how you registered the SSL domain, if it is www.yourdomain.com, then no matter you use http or https. if it is secure.yourdomain.com, then you should correct www.youdomain.com to secure.yourdomain.com.