Re: Not Secure Download-Links in Secure Landing Page Domain

DD-Yasin · ‎05-03-2023

A little while ago I added the SSL certificate to our LPs by adding the following meta tag to the <head> of our LP templates (see this post) :

<meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests" />

However I noticed, that whenever include a calender file in our E-Mails it redirects to an unsecured page/download link with the .ics file.
Shouldn't my domain have SSL, since when any "ordinary" LP is opened, it is shown as secure? What am I missing here?

Thanks in advance for any advice.

SanfordWhiteman · ‎05-03-2023

A little while ago I added the SSL certificate to our LPs by adding the following meta tag to the <head> of our LP templates (see this post) :
<meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests" />

That’s not adding the SSL certificate, though. That’s ensuring all assets on a given page are loaded over SSL if the main document is loaded over SSL.

The certificate must already be added for that meta tag to be meaningful. What is your LP domain?

View solution in original post

SanfordWhiteman · ‎05-03-2023

A little while ago I added the SSL certificate to our LPs by adding the following meta tag to the <head> of our LP templates (see this post) :
<meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests" />

That’s not adding the SSL certificate, though. That’s ensuring all assets on a given page are loaded over SSL if the main document is loaded over SSL.

The certificate must already be added for that meta tag to be meaningful. What is your LP domain?

DD-Yasin · ‎05-04-2023

Hi Sanford, thanks for pointing that out. What I meant was, we added the SSL certificate for Landingpages with the help of Marketo Support and used that code snippet to ensure the content is loaded over https. However I found out that there is a separate SSL for Email Tracking Links which I think we need to implement to solve this issue