Hello Conor,
Thanks for the speedy reply! I've been thinking about this today and also coming to the conclusion the shared certificate is the most likely culprit.
I agree about the secure URIs being ugly but had been prepared to accept that for now, whilst we work on marketing the site. However, a quick check with my hosting company shows that a dedicated IP and certificate is much less than I had thought, so I think that will be the path of least aggravation.
I just need to present a convincing argument to the board (my wife!)
cheers
Dave
Bookmarks