Have Geek Brain

Security error in cross-domain iframe

I have a clicker for a client. The tracker is just a piece of javascript that writes an iframe (different domain) to the page.

If I have a normal iframe, I can track clicks more accurately (I compare the data with another tracking solution) than when the iframe is secure (the site is accessed via ssl).

While trying to debug the problem, I came across a scenario where there was a security error in the iframe. He said something to the extent that the secured certificate was not valid.

Now the problem is that I only saw this error once, after which I could not reproduce it. Is there a way to reproduce the error? Is there a way to understand why I am tracking fewer clicks if the iframe is protected?

Technology stack :
dotNet framework 3.5
OS: Win 2003 server
Web server: IIS 6.0
SSL certificate: Go Daddy.

0


a source to share


2 answers


iframes must share the same domain, for example foo.com and subdomain.foo.com are not the same SSL.



+1


a source


The range of valid access for a page can be extended if the script assigns the site namespace suffix to the document.domain property, up to the second level domain. For example, a page at www.microsoft.com might assign the document.domain property - originally www.microsoft.com - to be microsoft.com to extend access to included pages at home.microsoft.com or any other site if other pages are also set the document.domain property to the same value. About interframe and security: MSDN



+1


a source






More articles:


All Articles