need help with moving between http and https environments

[TOMHARROW]

I have a dilema.

We have 2 environments. One secure one non secure. When a user is in the secure env and clicks on a link back to the non-secure then they are displayed a "display non secure content" alert. You see this everywhere on the net but I want to stop it from happening n our site.

I have comeup with the following solutio but wondering if anyone else has used something simpler? or has a better solution?

thanks

tom

(pseudo code)

Code:

if servervariables("SERVER_PORT_SECURE") = 0 then

redirect("http://www.nonsecure.co.uk" & srevervariables("URL") & "?" & servervariables("querystring"))

end if


two areas are

1. marketting pages
2. booking engine

yes... the secure part is a booking engine on a different domain developed by a seperate company for us. they pass back a session id to our marketting pages and we pass it back in order to populate shopping cart and remember user.

i have supplied them with a navigion clone of ours that they can sit on the booking engine to maintain same look and feel as the marjketting pages. the links on the navigation point bvack to the marketting pages using https:// so no error message is displayed on the bokking engine.

once clicked and user lands oin marketting pages a "display non-secure content" or similar message is displayed because it is an https:// page but all the links are http://

Hope this clarifiues


yopur thoughts hugely appreciated

[miranda]

Why do you want the user to not know they are no longer in the secured section? It may be a pain that the message pops up, but most people will live with it if they are going to be sending personal information. I have known of people who will not even pass login info to a basic site with little info if it is not in a secured socket layer. People are paranoid with all of the identity theft going on and the incidences of phishing for info on the net.

just my $0.02 worth

[oracleguy]

Why do you want the user to not know they are no longer in the secured section? It may be a pain that the message pops up, but most people will live with it if they are going to be sending personal information. I have known of people who will not even pass login info to a basic site with little info if it is not in a secured socket layer. People are paranoid with all of the identity theft going on and the incidences of phishing for info on the net.

just my $0.02 worth

True its better to use a completely HTTPS page or a completely HTTP page, try not to mix secure and non-secure content.