title: Self-signed SSL certificate in an iframe
body: <p>I am developing a facebook app and ran into the problem of secure browsing. Facebook can be set to secure browsing where all interaction with the website happens over HTTPS. To make the app usable in this case (it is included via an iframe), we need to provide a secure URL ourselves. Since we currently can't buy a CA signed certificate, we needed to sign our own one. However, when the website is displayed in this iFrame, the security exception is not at all or not correctly displayed: In Firefox the "Add Exception" button is not clickable and in Chrome we get a 501 error message. What is this? And can this be solved somehow?</p>
  
  <p>Please do not post comment about how unsecure self-signed certificates are. I know that, and I would rather have a "real" one. This is just not an option at the moment, so signing our own is better than excluding secure browsing people totally from the app.</p>