CODEWITHSUNDEEP
https
Shan Lim
Shan Lim

Reputation: 63

Showing non-https iframe in subdomain of https site

Now, I know that https site cannot show non-https 3rd party site in an iframe.

But if I get SSL cert for www.mydomain.com and mydomain.com ONLY, can subdomain.mydomain.com show non-https iframe content?

Upvotes: 1

Views: 272

Answers (1)

Tom
Tom

Reputation: 4826

If subdomain.mydomain.com is non-https, it can show non-https iframe content.

The only effect of the https on the parent domain (mydomain.com) is if the parent domain use HSTS (a header that tells the browser to force https) with the option includesubdomains: If that option is activated on the parent domain, then a visitor could be forced to visit subdomain.mydomain.com with https (even if you didn't activate https on it!)

Upvotes: 1

Related Questions