Forum Moderators: buckworks

Message Too Old, No Replies

secure server question.

redirections between two https sites

         

omoutop

12:48 pm on Jul 25, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Hello all!

In our site we decided to make some applications that will require on-line payments. So we opened an account in a large bank and perform the connections.

One problem appeared though... as soon as we entered the credit card info and press the submit button (in the secure server of the bank of course and without even changing a page, still remaing in the first form page), a pop-up window appeared stating we are about to leave the secure enviroment and return to a non-secure on. Of course we were aware of that fact, but what about the average user? Most people (withing the company and from friends) answered that they would press the cancel button since they would loose confidence with a message like that.

We talk to the bank about that and they came with a solution: two static pages (failed and success) in their server would prevent the message from appearing. And these two static pages would prevetn our applications from working properly (notify storage and logistics applications etc).

So we though of purchasing an SSL key and make our site secure (or even section of the site - not sure yet).

So the user from a https url (our site) would redirected to a https url (bank) and back to a https url (our site). Logicaly speaking the pop-up should not appear, correct?

Would the purchase of an SSL key help us with this situation?

JesperFJ

2:54 pm on Jul 25, 2006 (gmt 0)

10+ Year Member



Sounds like you would get the message later anyway. If you are redirected to https://www.yoursite.com/success.html, at some point you are likely to be directed back to http://www.yoursite.com (leaving https)

[edited by: lorax at 5:27 pm (utc) on July 25, 2006]
[edit reason]
[1][edit reason] delinked [/edit]
[/edit][/1]

omoutop

3:12 pm on Jul 25, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Not really...

(naturally) we post to specific url to bank

and bank asks for 3-4 specific urls to our site.

so if i declare https://www.demosite.com/page1.htm in bank, then the redirection will be there, not in http://www.demosite.com.

The main question is: will we get rid of anoying popups while redirectionm occurs?

[edited by: lorax at 5:27 pm (utc) on July 25, 2006]
[edit reason]
[1][edit reason] delinked [/edit]
[/edit][/1]