Thanks for that LH (I thought you had Vista)
It seems I have worked out the issue.
There is an issue as it stands currently only with my browser / my system? I don't know exactly,
But it's this;
When Ghostery is Enabled (by default for me) it stops trackers from following your movements
in order to send you targeted adverts and to collect information about your viewing
practice in order to build up a Analytical view of the things you like.
Unfortunately in my case it also has a side effect.
In the first figure you can see the SSL break in the URL as shown in the Video in my earlier post,
on the right hand side you can see the familiar 'Blue Ghost'.
fig.1
(click to open the pic in a new tab, expand as necessary)In the second figure you can see the Ghostery elements box open with a list of 4 trackers
(as in the case of Sophos blog).
Highlighted is the problematic tracker.
fig.2
(click to open the pic in a new tab, expand as necessary)
Wordpress Stats is a Analytics tracker, essentially harmless unless you hate the thought of them
sharing your information to
turd 3rd parties.
Although in my case it seems to break the function of SSL on these Wordpress sites, as yet I don't
know why, however I do have my theories which I shall mention later.
In the third (and final) figure I have highlighted the Accept / Deny function, when accepted full SSL is allowed
as shown in the video.
fig.3(click to open the pic in a new tab, expand as necessary)
I have been in contact with Yamil Burgoss at Ghostery and here is the latest reply;
"Hi Guiltyspark,
I've tried blocking the trackers you have mentioned for those specific sites
but either the tracker isn't visible on my end or the tracker shows no effect
on the site's encryption.
Unless I am able to replicate the issue on my end,
you may want to allow certain sites their 3rd party trackers for security/functionality
purposes while blocking it for other sites that have no need for them.
If you have any other questions or concerns, just let me know."
Thanks,
YamilSo either I have found something that should interest others from a security point of view,
or my version has somehow become corrupted in a very unique way.
The Theory.Earlier on I mentioned that I had a theory (or just plain ol' Paranoia you be the judge)
and this is it;
Imagine the Internet as we know it becoming filled with "ownership" or "privatization" under a monopoly
of "think tanks". (wait it gets more paranoid)
These "think tanks" are wealthy organizations who revolve around Analytics and Marketing Strategy,
now, we know that the Internet is pushing further towards a complete SSL network this was inevitable.
but supposing the ulterior motive was that in order to use Full SSL on a website you had to allow
for the Analytics (and eventually Adverts) in order for a website to function correctly.
I have also tried this practice on the
www.microsoft.com/en-gb/software-download/windows7website where
Wordpress Stats is not in use however
ThreatMetrix is.
As you can see from the link ThreatMetrix is involved in Cybercrime Defence, why this
breaks SSL is a little strange but it would go some way to prove my
Analytics theory.
I'm just now waiting for all the Advertising to start.