SSL iframe is embedded on other web site

dns, iframe, security, ssl

Solution

- No.

- You will only get a security error if the embedding site uses SSL, but the iFramed one does not. Whether the sites use different certificates or not, that does not matter.

- No. (Isn't this the same question as #1?)

Summary

Having different certificates between the main page and iframed pages is not a problem.

Embedding `https://` pages with `<iframe />` on a `http://` page is not a problem.

However, if you are running a `https://` secured page that embeds non-secure pages via `http://`, then you might get something like this (Internet Explorer):

It depends on the browser and its settings. For example, in IE you can turn this off:

Problem

Iframe from domain with SSLcertificate will be embedded on other site (foo.com). - Must foo.com have SSL cerificate? - If foo.com has SSL certificate, will it be an security error? foo.com has SSL certificate for foo.com, but iframe domain has other SSL certificate. - If foo.com hasn't got SSL certificate, will it be an security error?

Original source

Related problems