Discussion:
Adding http://sourceforge.net to "Trusted Sites" does NOT work
(too old to reply)
Paul Tander
2008-10-13 21:12:22 UTC
Permalink
Every time I download a software package from the well knwon sourceforge web site
IntExp 7 tell me some download risk with a yellow bar at the top of the browser window.

So I decided to add sourceforge domain to my trusted sites.

When I go now to menu

tools->Internet Options->Security->Trusted Sites
and try to add

http://sourceforge.net

or even

sourceforge.net

then IE turns this URL pattern automatically into

http://*.sourceforge.net
resp
*.sourceforge.net

However the dot before "sourceforge" is a problem because all downloads
are delivered from URLs with no third level sub domain.

http://*.sourceforge.net/

DOES NOT MATCH URLs like:

http://sourceforge.net/......

That mean that sourceforge downloads still require a user confirmation.

How can I avoid automatic prepending of "*." when adding domains to "Trusted Sites"?

Paul
CTOS
2008-10-16 15:57:01 UTC
Permalink
The trusted site is http://downloads.sourceforge.net

If the URL your adding does not include a hostname with the domain, i.e.
hostname.doman.net, then * is added by design. No hostname, then the
assumption is you trust all hosts under that domain.
Post by Paul Tander
Every time I download a software package from the well knwon sourceforge web site
IntExp 7 tell me some download risk with a yellow bar at the top of the browser window.
So I decided to add sourceforge domain to my trusted sites.
When I go now to menu
tools->Internet Options->Security->Trusted Sites
and try to add
http://sourceforge.net
or even
sourceforge.net
then IE turns this URL pattern automatically into
http://*.sourceforge.net
resp
*.sourceforge.net
However the dot before "sourceforge" is a problem because all downloads
are delivered from URLs with no third level sub domain.
http://*.sourceforge.net/
http://sourceforge.net/......
That mean that sourceforge downloads still require a user confirmation.
How can I avoid automatic prepending of "*." when adding domains to "Trusted Sites"?
Paul
ju.c
2008-10-16 18:09:27 UTC
Permalink
That warning bar is to protect you from drive-by downloads, is normal
and should never be disabled. If, however you still wish to disable the
bar, follow these directions:

Open 'Tools-->Internet Options' and under the "Security" tab,
select the zone you want to change and click the "Custom" button.
Scroll down to 'Downloads-->Automatic prompting for file downloads'
and set it to "Enable".


ju.c
Post by CTOS
The trusted site is http://downloads.sourceforge.net
If the URL your adding does not include a hostname with the domain, i.e.
hostname.doman.net, then * is added by design. No hostname, then the
assumption is you trust all hosts under that domain.
Post by Paul Tander
Every time I download a software package from the well knwon sourceforge web site
IntExp 7 tell me some download risk with a yellow bar at the top of the browser window.
So I decided to add sourceforge domain to my trusted sites.
When I go now to menu
tools->Internet Options->Security->Trusted Sites
and try to add
http://sourceforge.net
or even
sourceforge.net
then IE turns this URL pattern automatically into
http://*.sourceforge.net
resp
*.sourceforge.net
However the dot before "sourceforge" is a problem because all downloads
are delivered from URLs with no third level sub domain.
http://*.sourceforge.net/
http://sourceforge.net/......
That mean that sourceforge downloads still require a user confirmation.
How can I avoid automatic prepending of "*." when adding domains to "Trusted Sites"?
Paul
Loading...