879069 - https://www.domaintechnik.at does not work properly because of mixed content blocking

Status: RESOLVED FIXED

(Tech Evangelism Graveyard :: German, defect)

Description

[Matt Wobensmith [:mwobensmith][:matt:]]

Mixed content blocking is a feature that prevents insecure elements on secure pages from loading. In Firefox 23, this feature will default to blocking "active" insecure content, which may break some web sites. 

More information on Firefox's Mixed Content Blocker is below: 
http://blog.mozilla.org/tanvi/2013/04/10/mixed-content-blocking-enabled-in-firefox-23/

The security feature is currently breaking the HTTPS version of www.domaintechnik.at. It also appears to be functioning incorrectly in Chrome 26 and IE10.

https://www.domaintechnik.at/ should render and function like http://www.domaintechnik.at/, but it doesn't because some HTTP resource(s) are not loaded.  Here is a list of the active, HTTP resources that were blocked: 

Blocked loading mixed active content "http://www.domaintechnik.at/typo3temp/stylesheet_8a93d95b52.css" @ https://www.domaintechnik.at/
Blocked loading mixed active content "http://www.domaintechnik.at/data/css/general.php" @ https://www.domaintechnik.at/
Blocked loading mixed active content "http://www.domaintechnik.at/typo3conf/ext/powermail/Resources/Public/Css/CssBasic.css" @ https://www.domaintechnik.at/
Blocked loading mixed active content "http://www.domaintechnik.at/data/js/jquery-2.0.x-1.10.x-1.2.x.js" @ https://www.domaintechnik.at/
Blocked loading mixed active content "http://www.domaintechnik.at/data/js/general.php" @ https://www.domaintechnik.at/
Blocked loading mixed active content "http://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit" @ https://www.domaintechnik.at/
Blocked loading mixed active content "http://www.domaintechnik.at/typo3conf/ext/powermail/Resources/Public/Js/jquery.validationEngine-en.js" @ https://www.domaintechnik.at/
Blocked loading mixed active content "http://www.domaintechnik.at/typo3conf/ext/powermail/Resources/Public/Js/jquery.validationEngine.js" @ https://www.domaintechnik.at/
Blocked loading mixed active content "http://www.domaintechnik.at/typo3conf/ext/powermail/Resources/Public/Js/formx.js" @ https://www.domaintechnik.at/

Comment 1

[sjw]

Quote:
"vielen Dank für Ihre Nachricht!

Eine SSL-verschlüsselte Fassung der Website wird offiziell nicht angeboten. Daher ist auch keine vollständig verschlüsselte Übermittlung vorgesehen. Die allgemeinen Websitezugriffe werden nun auf die HTTP-Fassung umgeleitet. Die ausschließlich SSL-verschlüsselt zugänglichen Websitebereiche sind nach wie vor aktiv.

Sie können den "Bug" somit schließen."

They implemented a workaround (http only).

[closeme]