security alert: display nonsecure items?

[tomaz]

Hi

I created an intranet over https.
some clients still use Internet Explorer 5.01, this can't be changed :(

Now I have following problem:

When I click on a navigation button BEFORE the page is fully loaded, I get following message:

This page contains both secure and nonsecure items.
Do you want to display the nonsecure items?


When I click on a navigation button AFTER the page is fully loaded, I don't get any error message.

no includes or frames over HTTP are used. every file is strictly https...
Also very strange that the message is not shown when the page is fully loaded.

settings in IEXplorer are ok; site is a trusted site and custom level is very low.

Somebody could give me any hints or tips?

This would be extremely appreciated!

[unauthorized]

My heart cried when I read the 2nd line of your post. And I'm one cold hearted (censored).

Anyway, we can't see what's inside your mind so if you want help, you'd have to post some code if you want help.
You should look in your HTML output for URLs that start with "http://". I'm not sure what IE considers unsecure, but I believe you have some src, href or form action that links to a non-encrypted page.

BTW, didn't IE5 use a weak 40-bit encryption? That's just as useful as plain text communication against modern quad-core 3GHz CPUs.

[tomaz]

tnx, coldhearted censored :)

I checked out the mixed content with a useful tool 'debugbar'.
There I can see every include and évery file in my site.

everything is https. Before it wasn't and i bugfixed it, so i really looked into the whole page.
also, the problem doesn't show up when you wait till the page is fully loaded. if there were any http: includes it would give a message too.

i can't simulate in on IE5.5, 6 or 8.
So I can believe the problem is due to the IE version.

It's something very odd...
and so damn stupid I can't upgrade the IE's...