Adding http://sourceforge.net to "Trusted Sites" does NOT work

13 Oct 2008 9:12 PM

Paul Tander

Every time I download a software package from the well knwon sourceforge web site
IntExp 7 tell me some download risk with a yellow bar at the top of the browser window.

So I decided to add sourceforge domain to my trusted sites.

When I go now to menu

tools->Internet Options->Security->Trusted Sites
and try to add

http://sourceforge.net

or even

sourceforge.net

then IE turns this URL pattern automatically into

http://*.sourceforge.net
resp
*.sourceforge.net

However the dot before "sourceforge" is a problem because all downloads
are delivered from URLs with no third level sub domain.

http://*.sourceforge.net/

DOES NOT MATCH URLs like:

http://sourceforge.net/......

That mean that sourceforge downloads still require a user confirmation.

How can I avoid automatic prepending of "*." when adding domains to "Trusted Sites"?

Paul

16 Oct 2008 3:57 PM

CTOS

The trusted site is http://downloads.sourceforge.net

If the URL your adding does not include a hostname with the domain, i.e.
hostname.doman.net, then * is added by design. No hostname, then the
assumption is you trust all hosts under that domain.

Show quoteHide quote

"Paul Tander" wrote:

> Every time I download a software package from the well knwon sourceforge web site
> IntExp 7 tell me some download risk with a yellow bar at the top of the browser window.
>
> So I decided to add sourceforge domain to my trusted sites.
>
> When I go now to menu
>
> tools->Internet Options->Security->Trusted Sites
> and try to add
>
> http://sourceforge.net
>
> or even
>
> sourceforge.net
>
> then IE turns this URL pattern automatically into
>
> http://*.sourceforge.net
> resp
> *.sourceforge.net
>
> However the dot before "sourceforge" is a problem because all downloads
> are delivered from URLs with no third level sub domain.
>
> http://*.sourceforge.net/
>
> DOES NOT MATCH URLs like:
>
> http://sourceforge.net/......
>
> That mean that sourceforge downloads still require a user confirmation.
>
> How can I avoid automatic prepending of "*." when adding domains to "Trusted Sites"?
>
> Paul
>
>

16 Oct 2008 6:09 PM

ju.c

That warning bar is to protect you from drive-by downloads, is normal
and should never be disabled. If, however you still wish to disable the
bar, follow these directions:

Open 'Tools-->Internet Options' and under the "Security" tab,
select the zone you want to change and click the "Custom" button.
Scroll down to 'Downloads-->Automatic prompting for file downloads'
and set it to "Enable".

ju.c

Show quoteHide quote

"CTOS" <C***@discussions.microsoft.com> wrote in message news:B590F13E-30D3-4202-88EE-2578C5BEB1EE@microsoft.com...
> The trusted site is http://downloads.sourceforge.net
>
> If the URL your adding does not include a hostname with the domain, i.e.
> hostname.doman.net, then * is added by design. No hostname, then the
> assumption is you trust all hosts under that domain.
>
> "Paul Tander" wrote:
>
>> Every time I download a software package from the well knwon sourceforge web site
>> IntExp 7 tell me some download risk with a yellow bar at the top of the browser window.
>>
>> So I decided to add sourceforge domain to my trusted sites.
>>
>> When I go now to menu
>>
>> tools->Internet Options->Security->Trusted Sites
>> and try to add
>>
>> http://sourceforge.net
>>
>> or even
>>
>> sourceforge.net
>>
>> then IE turns this URL pattern automatically into
>>
>> http://*.sourceforge.net
>> resp
>> *.sourceforge.net
>>
>> However the dot before "sourceforge" is a problem because all downloads
>> are delivered from URLs with no third level sub domain.
>>
>> http://*.sourceforge.net/
>>
>> DOES NOT MATCH URLs like:
>>
>> http://sourceforge.net/......
>>
>> That mean that sourceforge downloads still require a user confirmation.
>>
>> How can I avoid automatic prepending of "*." when adding domains to "Trusted Sites"?
>>
>> Paul
>>
>>