[SM-DEVEL] Mozilla, SSL, and new reply/forward message buttons

[Jason L. <lis...@qu...>]

I'm using SM 1.5.1[cvs], and it appears that if your SM server is set up to use secure HTTP (HTTPS, SSL), the new buttons that one uses to reply to or forward a message confuse Mozilla a bit.

I'm currently using Mozilla Firefox 0.9 as my web browser.  My server is an https://[blah]/ server, and I have it configured to use separate windows for message composition.  Replying to or forwarding messages with version 1.4.3a worked perfectly.  Now that I'm testing out 1.5.1[cvs], when I click on the "Reply", "Reply All", or "Forward" button, the window pops up, and then Firefox throws up a dialog box that reads:

"Although this page is encrypted, the information you have entered is to be sent over an unencrypted connection and could easily be read by a third party.

Are you sure you want to continue sending this information?"

If I say that I'm fine with it, I can reply or forward to my heart's content, no problems.  The message composition window is clearly being served by the HTTPS server; the lock is in place at the bottom left, and the security stuff is intact.  It seems that the issue is somehow in Mozilla getting confused, perhaps by the relative URLs that are used in the onclick: events attached to those buttons.

(Annoyingly, the box doesn't offer the option to never show that warning again, and there's no configuration option to do so in Firefox.)

Thought I'd offer up the observation; I haven't a clue if this is a Mozilla issue (probably) or a SM issue (probably not), but there's inevitably a way for SM to work around it if it's annoying enough to other people, too!

/jason