IE 7 ssl lock icon disappears on proven secure site: Firefox is OK

My company has a website for submitting payment.

When we go to a page that has the form for submitting payment
information the lock disappears.

IE7 fully updated. The url has https:// as the address. Search of the
source reveals that there are no http requests. There are no iframes.

When I go to the properties of the page it shows the following
Connection: property value.
"TLS 1.0, RC4 with 128 bit encryption (High); RSA with 1024 bit
exchange"

Firefox maintains its security indicator.

Our customers are rightfully not will to post a payment.

Thanks

I think I've narrowed it down to this line of html.

<input type="image" src="/wwwimages/customerportal/images/submit.gif"
name="submit" alt="Submit secure payment"
border=0>&nbsp;&nbsp;&nbsp;<a href="pay.php"><img border=0
alt="Cancel" src="/wwwimages/customerportal/images/cancel.gif"></a>

Thanks for any guidance,
Greg

On Sep 29, 10:03*am, yzarc <yzarc...@gmail.com> wrote:
> My company has a website for submitting payment.
>
> When we go to a page that has the form for submitting payment
> information the lock disappears.
>
> IE7 fully updated. The url has https:// as the address. Search of the
> source reveals that there are no http requests. There are no iframes.
>
> When I go to the properties of the page it shows the following
> Connection: property value.
> "TLS 1.0, RC4 with 128 bit encryption (High); RSA with 1024 bit
> exchange"
>
> Firefox maintains its security indicator.
>
> Our customers are rightfully not will to post a payment.
>
> Thanks

That line in itself wouldn't cause IE to not show the padlock, unless either
of the IMG requests result in a response redirecting to a non-SSL URL. Is
the page you're having problems with public? If so, what is the URL and I'll
be happy to take a look.

Dan

yzarc wrote on Mon, 29 Sep 2008 07:56:20 -0700 (PDT):

> I think I've narrowed it down to this line of html.

> <input type="image" src="/wwwimages/customerportal/images/submit.gif"
> name="submit" alt="Submit secure payment"
> border=0>&nbsp;&nbsp;&nbsp;<a href="pay.php"><img border=0 alt="Cancel"
> src="/wwwimages/customerportal/images/cancel.gif"></a>

> Thanks for any guidance,
> Greg

> On Sep 29, 10:03 am, yzarc <yzarc...@gmail.com> wrote:
>> My company has a website for submitting payment.

>> When we go to a page that has the form for submitting payment
>> information the lock disappears.

>> IE7 fully updated. The url has https:// as the address. Search of the
>> source reveals that there are no http requests. There are no iframes.

>> When I go to the properties of the page it shows the following
>> Connection: property value.
>> "TLS 1.0, RC4 with 128 bit encryption (High); RSA with 1024 bit
>> exchange"

>> Firefox maintains its security indicator.

>> Our customers are rightfully not will to post a payment.

>> Thanks

I'm sorry I jumped the gun.

Although the images being referenced are using https they are in a
different sub domain.

customerportal.pngcom.com has image references to ecare.pngcom.com.
Therefore they are seen as insecure.

I'm shocked that firefox doesn't catch this and show insecurity. We
are making an adjustment to the url rewritter to fix the problem.

Thanks for your time.
Greg

On Sep 29, 11:27*am, "Daniel Crichton" <msn...@worldofspack.com>
wrote:
> That line in itself wouldn't cause IE to not show the padlock, unless either
> of the IMG requests result in a response redirecting to a non-SSL URL. Is
> the page you're having problems with public? If so, what is the URL and I'll
> be happy to take a look.
>
> Dan
>
> yzarc wrote *on Mon, 29 Sep 2008 07:56:20 -0700 (PDT):
>
> > I think I've narrowed it down to this line of html.
> > <input type="image" src="/wwwimages/customerportal/images/submit.gif"
> > name="submit" alt="Submit secure payment"
> > border=0>&nbsp;&nbsp;&nbsp;<a href="pay.php"><img border=0 alt="Cancel"
> > src="/wwwimages/customerportal/images/cancel.gif"></a>
> > Thanks for any guidance,
> > Greg
> > On Sep 29, 10:03 am, yzarc <yzarc...@gmail.com> wrote:
>
> *>> My company has a website for submitting payment.
>
> *>> When we go to a page that has the form for submitting payment
> *>> information the lock disappears.
>
> *>> IE7 fully updated. The url has https:// as the address. Search of the
> *>> source reveals that there are no http requests. There are no iframes.
>
> *>> When I go to the properties of the page it shows the following
> *>> Connection: property value.
> *>> "TLS 1.0, RC4 with 128 bit encryption (High); RSA with 1024 bit
> *>> exchange"
>
> *>> Firefox maintains its security indicator.
>
> *>> Our customers are rightfully not will to post a payment.
>
> *>> Thanks