Using iFrames for your Web to Print Store Front

If you have a domain like http://wwww.MyPrintShop.com and you want people to go to that domain to log into their go epower portal please read on.

As you know Go ePower is a secure website as there is personal information being passed along. As well, there is the potential to do credit card transactions whether you are using that ability or not. Therefore, goepower.com uses https and employs the most updated ecryption as per PCI comliance regulations. 

Now your webpage is not secure, and if it was secured the security is set for myprintshop.com and not for goepower therefore your iframe webpage is considered to be "Mixed Active Content."

Mixed Active Content is when your page which is http is referncing a secure web page which is https.

More and more browsers are starting to disable this for obvious reasons. At the moment chrome does not block such websites from being reached but eventually it will. Firefox, ie and safari do block such websites.

There are many security risks involved by allowing secure sites to be iframed. An attacker can replace the HTTP content on the page you're visiting in order to steal your credentials, take over your account, acquire sensitive data about you, or attempt to install malware on your computer.

Therefore, if you are using Bootstrap iframes are disabled regardless of the browser being used.

Read this article about Mixed Content by Mozilla.

https://blog.mozilla.org/tanvi/2013/04/10/mixed-content-blocking-enabled-in-firefox-23/

What you can do.

2 Options.

Option 1 is if you only care to create a standard login page that will redirect your customers to their go epower portal. so when they log in they will be redirected to mycustomer.goepower.com.

If that is the case then you can create your own login page at www.myprintshop.com and use Go ePower's APIs to redirect the user to the correct portal. However, using this method will take them to the URL customer.goepower.com.

Option 2. Use this option if you want to mask the URL goepower.com with your url. To do this you need to follow the below instructions:

1. Purchase an ssl certificate for the domain.2. Send us the name of the domain, the owner of the domain and the business address of the owner so we can generate a CSR certificate and send it to you to insert it into the ssl.3. You then need to send us the ssl certificate to install on our server.4. Then you can point your IP and it should work.In order to do this there is a cost to you to buy the SSL certificate from your provider as well as an administration cost to have this installed. Please contact support for questions or help.