Call web service over HTTP on HTTPS page

Question

I am having problems calling a web service using AJAX via HTTP when it's on an HTTPS page.

Is this a cross-domain/protocol problem? Do I need to do the AJAX call in the same protocol as the page?

Just wondering if it's the same problem as trying to do an HTTPS AJAX call when on an HTTP page, I suspect it is.

Any advice appreciated.

Thanks Duncan

Answer 1

Don't do that. You run a serious risk of someone intercepting and modifying just the HTTP traffic to break your security.

Answer 2

Yes, the protocol is part of the same origin policy.