Can I create exemptions in the major Windows browsers (IE, Firefox, Chrome, Safari) for the insecure content warnings you get when mixing https and http on the same page?
WE have a site that needs to run https... it allows students here to pay their bills online, sign up for classes, view their grades, housing, finincial aid etc, and allows faculty to view appropriate student information (FERPA protected). Site content should istelf pretty much never be seen over vanilla unencrypted http.
One of the features of this site is that it's also a portal. Students can chat, post to message boards (for sale, rides home, etc), and — through iframes — setup "gadgets". There are a few default gadgets embedded, such as a print use counter, facebook (to encourage use of the portal), library card catalog lookup, and others, and students can set up their won — and some of these do not support https at all. We do know that students are actually using this site regularly, and it loads as the home page in our computer labs.
This brings me to the my question. For our college-owned computers, at least, I would like to disable the warnings in IE, Firefox, Safari, and Chrome, for just that specific insecure content and in just those specific pages where we've included it. Is this possible? If not, is it possible to create an exception more broadly, that maybe only covers some of the browsers? I'd like to limit the XSS exposure as much as possible, but still have things "just work" on the campus computers.