Google Chrome incorrectly reporting “mixed content” on SSL-encrypted pages

Chrome will show a green icon the left of a URL that is SSL-encrypted and does not use “mixed content”. In other words, a page that displays only secure content over an HTTPS connection. That’s great, and increases user trust. However, if the site contains 20 pages and one of them contains an external non-HTTPS JavaScript file, Chrome will display a red “skull and bones” icon to the left of the URL bar, and that icon will remain displayed next to that site’s URLs for that visitor until they close Chrome.

For example, Skype offers a status button to display a user’s Skype status. That relies on a JavaScript file that resides on Skype’s servers and is only available over an HTTP connection. So, to use this on an all-SSL site, you’d probably need to put it inside an iframe.

I suppose Chrome’s developers might think that if one page on a site contains such content, they’d better keep warning the user about other pages on that site too, even though the other pages do not contain mixed content. I would prefer tit actually be accurate.

Share and Enjoy:
  • Print
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google Bookmarks
  • LinkedIn
  • MySpace
  • RSS
  • Slashdot
  • StumbleUpon
  • Technorati
  • Yahoo! Bookmarks
  • Twitter

Tags: , , ,

2 Comments

www subdomains (or lack thereof)

Why do some major sites not have working www subdomains? For example, a domain registrar I have used in the past, ziggle.com, is not accessible from www.ziggle.com. This seems like a mistake to me, but maybe they have their reasons. I came across another example of this a few days ago but can’t remember which site it was. If the DNS is set up right and the .htaccess file contains the following (if using Apache), there should be no problem;

RewriteEngine On
RewriteCond %{HTTP_HOST} !^www\.theirsite\.com[NC]
RewriteRule ^(.*)$ http://www.theirsite.com/$1 [R=301,L]

Share and Enjoy:
  • Print
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google Bookmarks
  • LinkedIn
  • MySpace
  • RSS
  • Slashdot
  • StumbleUpon
  • Technorati
  • Yahoo! Bookmarks
  • Twitter

Tags: , ,

4 Comments

Migrating from FrontPage to Joomla

I know what you’re thinking: “are there really still people using FrontPage?” – and the answer is yes. Many hosting companies still offer the FrontPage extensions, and because it is Microsoft software, many people still feel more in their comfort zone with this than with some browser-based content management system like Drupal, Joomla, or WordPress. Actually, Joomla is the only one of those three that is actually a CMS. Drupal’s a framework that can be made into the vision of its creators, but requires more up-front work to get it to that point. For more complex sites it would be worth it though. WordPress is a blogging platform that *can* be used as a CMS, and though it may be a bit of extra work for developers, the fact that many users are now familiar with its interface means an uptick in this trend. More people seem to be using WordPress for content management and not just pure blogging these days. WordPress MU (multi user) together with BuddyPress can be especially powerful for social blogging and interaction.

Migrating a FrontPage site to Joomla

I recently migrated a site from FrontPage to Joomla. I used a very fancy migration tool called Copy & Paste. The site had only a handful of pages so this was no big deal. It just meant saving the graphics to Joomla’s images/stories folder, though even that can often be avoided.

The new Joomla site is not yet live, but I have already turned on SEF (search engine friendly) URLs, which entails an .htaccess file as provided by Joomla. The problem is, FrontPage also uses .htaccess, and whenever you update the FrontPage login credentials, it overwrites the file, rather than updating it and leaving the Joomla parts intact. This means that each time the FrontPage credentials are updated, the Joomla parts have to be added back in. The thing is, with cPanel you can add redirects to htaccess and it will not remove anything from the file. Apparently FrontPage is not capable of this, and takes a more crude approach of simple overwriting the whole thing. It is a minor nuisance, and I suppose I could just wait until the site actually goes live to do the final updates on the file!!

Share and Enjoy:
  • Print
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google Bookmarks
  • LinkedIn
  • MySpace
  • RSS
  • Slashdot
  • StumbleUpon
  • Technorati
  • Yahoo! Bookmarks
  • Twitter

Tags: , , , ,

No Comments

Basecamp for time tracking, FreshBooks for invoicing

Basecamp is a great tool for managing projects, clients, and keeping track of time.

FreshBooks is a wonderful invoicing tool, offering smooth integration with Basecamp, online payment for your customers, and even snail mail for those times you need to mail an invoice the old-fashioned way. Using Authorize.net you can also set up recurring payments.

You can track time within Basecamp if you go with their Plus plan or higher, or you can track time in FreshBooks itself. If you use Basecamp, there are great extras such as  Project Recon for time tracking (with a timer). FreshBooks itself also offers stopwatch-style timers.

If you track your time in Basecamp, as I do, you can easily synchronize that with FreshBooks. In Basecamp you simply enter tasks in a to-do list and then log time by clicking on the little clock icon. You have to type in the time spent, i.e. “3.75″ or “3:45″. This is a slight nuisance, which can be alleviated by using Project Recon’s stopwatch approach.  I have noticed that the time log entries in Basecamp need to contain a meaningful description, which seems like extra work for  no good reason, when there’s already a to-do item that should contain descriptive text.

When adding time for a to-do, I don’t want to have to enter a Description. The Description should default to whatever the text for the To-do is. I am using Freshbooks, and if I simply import the time without adding a description to the time entry in Basecamp, the invoice line items in Freshbooks look like this:

[Some Project 05/18/10]

The Basecamp people (37signals) let me know they will take my suggestion into consideration, but until then the name of the game is to copy and paste the to-do text into the time log entry’s description … an unnecessary pain, I would think. I do hope they fix it.

Share and Enjoy:
  • Print
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google Bookmarks
  • LinkedIn
  • MySpace
  • RSS
  • Slashdot
  • StumbleUpon
  • Technorati
  • Yahoo! Bookmarks
  • Twitter

Tags: , , , , , , , ,

3 Comments

Skype “Call Me” button – no SSL support!!

To my dismay and total surprise, Skype does not offer an SSL version of its Call Me or Status buttons (link). I emailed them about this and they confirmed that it is not possible at this time, but that they would keep it in mind as a feature request. To me this is not a feature, but a basic must-have. HTTPS connections are a staple and a fact of life that should not have been overlooked. It should not be complicated to enable that, but considering that they have been in business for seven years, perhaps there is some fundamental roadblock preventing this.

Google Analytics uses JavaScript to determine whether the connection uses HTTP or HTTPS. Skype also uses an external JavaScript file, but forcibly loads it over HTTP, which is a problem for sites running on an HTTPS connection (SSL), because it will trigger “mixed content” and “potentially unsafe” content warnings in some browsers, depending on visitors’ browser settings. That can reduce customer trust, which in turn can have an impact on online sales or user stickiness.

If you need to use Skype buttons on a site that is accessed over SSL, beware.

Share and Enjoy:
  • Print
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google Bookmarks
  • LinkedIn
  • MySpace
  • RSS
  • Slashdot
  • StumbleUpon
  • Technorati
  • Yahoo! Bookmarks
  • Twitter

Tags: , , ,

1 Comment

When companies don’t want you to contact them ..

Ever notice how the bigger the company, the harder it is to contact someone? We all know how hard it can be to reach a live person who also happens to be helpful and knowledgeable. Today I was trying to get some simple HTML code for a Skype status button, and during that process Skype presented a link “Save this HTML snippet” – at http://www.skype.com/intl/en-us/tell-a-friend/get-a-skype-button/save.php. However, that link leads to a 500 Internal Server Error, and if you attempt to access that link directly, it gives a 404 Not Found error. So, being the helpful person that I am, I proceeded to find Skype’s contact link so I could let them know about this bug. There is no such link. I then tried their forum, but it contains no bug reporting area. So I posted it in their Suggestions forum and here, and hope they sort it out.

The irony here is that the bigger companies get, the more you’d expect them to have internal QA processes in place, however if they opened up the floodgates and let just anyone contact them, it would be unmanageable. It would be great if they could rely on regular user feedback for improvements, but I suppose they can’t afford the required staff … but in this case QA missed this one, apparently.

I did finally figure out how to contact them, by logging into Skype.com and then going to Help, Related, Get more help. However, that still offers no mechanism for reporting bugs or other feedback.

Share and Enjoy:
  • Print
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google Bookmarks
  • LinkedIn
  • MySpace
  • RSS
  • Slashdot
  • StumbleUpon
  • Technorati
  • Yahoo! Bookmarks
  • Twitter
No Comments

Basecamp & project management

We’ve recently started using Basecamp for project management and love it. It lacks robust user access level control, but this is not a must-have for us at the moment. The software makes it very easy to track tasks, comment on them, attach files, set milestones, and so forth. While using it I did notice a usability issue related to the commenting system. Normally, new comments are highlighted with a green icon. However, the system was highlighting even your own comments – if they were new.  Now, why would I want to re-read my own comment? I’m only interested in new comments by others!

Thankfully, I let Basecamp staff know about this usability glitch, and the VERY NEXT DAY they had resolved it! It’s nice to see that kind of responsiveness.

Share and Enjoy:
  • Print
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google Bookmarks
  • LinkedIn
  • MySpace
  • RSS
  • Slashdot
  • StumbleUpon
  • Technorati
  • Yahoo! Bookmarks
  • Twitter

Tags: , ,

No Comments

Joined the local chamber of commerce!

We’ve joined the Loudoun County Chamber of Commerce (northern Virginia / metro DC). We hope to get involved in some committees and start attending networking events. This seems like a great way to meet other local business owners and cross-pollenate, besides the obvious benefit of lead generation.

Share and Enjoy:
  • Print
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google Bookmarks
  • LinkedIn
  • MySpace
  • RSS
  • Slashdot
  • StumbleUpon
  • Technorati
  • Yahoo! Bookmarks
  • Twitter
2 Comments

Spec work and 99designs.com

99designs.com is a crowd-sourcing method for generating web and graphic designs quickly. It is also fairly cost-effective.

99designs.com has some things going for it that are attractive to customers, but I’m a little concerned about how they have designers competing. I wonder what kind of pay the designers get, and where they’re based. My understanding is the designers don’t get paid unless their design won the “contest”. This is spec work, which undermines and devalues this industry in my opinion. Why work with a disgruntled designer or one that doesn’t respect him or herself?

For example, to post a project, a client would pay a flat fee of $39, which should ward off frivolous project requests, and the winner of the design contest would be awarded the project budget via escrow. The trouble I have with this is that the final budgets, while reasonable for one designer (if on the low end), do not pay the “losers” of the design contest. I think this is wrong. In essence, 99designs.com is a competitor to elance.com and odesk.com, but presents its projects as design “contests” when in fact it is a way for clients to procure designs without needing bids. It’s spec work. I don’t think anyone should work for free, even the ones that lose the contest.

While a client might get a bunch of design options for little money this way, this process cut out the whole discovery phase of the project. For example, as a client you might want a new header and logo for your site. You can request this and receive many responses, and there’s a good chance one of them will strike your fancy. Normally there would be at least a small phase of getting to know the customer, their needs, business model, etc. That is entirely missing in the 99designs.com model. It might work in the end, but it’s exploitative. In some cases, designers on there are even under 18 (reference).

It’s a freelance marketplace masquerading as design contests … for little or no pay, and using child labor.

Share and Enjoy:
  • Print
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google Bookmarks
  • LinkedIn
  • MySpace
  • RSS
  • Slashdot
  • StumbleUpon
  • Technorati
  • Yahoo! Bookmarks
  • Twitter
No Comments

building new company site in D…

building new company site in Drupal. Got mockups done, and functionality already in place. Joined the local Chamber of Commerce too.

Share and Enjoy:
  • Print
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google Bookmarks
  • LinkedIn
  • MySpace
  • RSS
  • Slashdot
  • StumbleUpon
  • Technorati
  • Yahoo! Bookmarks
  • Twitter
No Comments