Home Forums Networks & Cross-Platform Networking Safari 5.0.1 secure sites -- no padlock icon?

Quick question...

Using all the latest, up-to-date everything (OSX 10.6.4, Safari 5.0.1, etc), and filling out a form requesting credit card info. The URL appears fine, as it starts with https... but i don't see the familiar padlock icon anywhere in Safari's title bar (upper right-hand corner usually).

Did Apple remove that visual aid?

Oh wait... if i trim the url, i see the icon:
https://forms.mactech.com/fillsurvey.php

But if i use the full url, the icon goes away:
https://forms.mactech.com/fillsurvey.php?sid=143

Hmmm... that's weird.
I don't know what to think.

Any thoughts?

--

EDIT: more weirdness... in the bottom right corner of that page it says...

powered by phpQuestionnaire

...and the url for that is: http://www.chumpsoft.com/

Like wow, if this is all an innocent happenstance.... why do they have a name like "chump" soft?


Edited by Hal Itosis (09/06/10 03:17 PM CST)

It looks suspicious to me. I get the same results that you describe but it appears to be that site. When I logged into my credit card account (as a test), everything was normal.

Okay thanks Jon.

So either way (by accident or by "design"), it seems my credit info might get transmitted in an insecure manner.

I tried calling them but got a voicemail machine.

I'll try again later.

Thanks again.

Here's something else: I opened the pages (both the full URL and the shortened one) in Camino and got the padlock icon both times. When I did the same in Firefox, the full URL page caused FF to issue a warning that says "You have requested an encrypted page that contains some unencrypted information. Information that you see or enter on this page could easily by read by a third party." The shortened URL doesn't trigger this warning but it also says (in all these browsers) "Currently no surveys."

Interesting info (and a capital idea ).
I'll play with some other browsers now.

Hi guys,

Just wanted you to get the information right from the horse's mouth on this.

We moved the registration page to a new server on Friday. https is working, but as you saw, we're now realizing that there's an issue with showing the lock.

Because we needed a bunch of information for the registration, we're using phpQuestionnaire, which is indeed written by chumpsoft. That's all cool.

In any event, we're working on the padlock issue -- but given the holiday, it may not be there until tomorrow.

Thanks,

Neil Ticktin
Publisher/Editor-in-Chief
MacTech Magazine, MacNews

Quick update.

This is all fixed. It wasn't that it wasn't secure -- but simply that the logo was being served from the main web site (via http) and not the secure site (via https).

If anyone sees a problem still, please drop me a line at publisher at mactech.com.

Thanks!

Neil

Thanks, Neil. I tested it out and all seems well.

I tried iCab 4.8 and it seemed happy with the certificate. I don't really understand all the details about how secure http works, but I eventually felt comfortable enough to go ahead with the subscription.

Thanks for stopping by Neil, I look forward to getting MacTech in the mail.

Yep, that's a situation that every Webmaster who deals with secure sites has faced at one time or another. If each element on the site isn't served securely, many browsers will barf or issue warning notices. This usually happens when a file is served using a hard-coded absolute path (like http://www.someserver.com/somefile...) rather than a relative path (/somefile...). I've faced this kind of problem myself.