title: Edge won't display pdf over https
body: <p>I have an old web application with apache webserver fronting weblogic server. The user authenticates using a client certificate and a password and can then access pdf files via jsp pages and <strong>https</strong>. When re-testing the application in current browsers I found that the pdf:s won't display in Edge.</p>
  
  <p>I have tried to strip out unrelated code. Note that the user has logged on using an SSL certificate before arriving at <code>edge_bug.jsp</code>:</p>
  
  <pre><code>&lt;%@ page %&gt;
  &lt;!DOCTYPE html&gt;
  &lt;html&gt;
      &lt;head&gt;
          &lt;meta http-equiv="Content-Type" content="text/html"/&gt;
          &lt;title&gt;edge_bug.jsp&lt;/title&gt;
      &lt;/head&gt;
      &lt;body&gt;
          &lt;a href="javascript:void(0)" onclick="window.open('testpdf.pdf', 'PDFWin' + new Date().getTime(), 'scrollbars=yes,status=yes,width=370,height=550,resizable=yes')"&gt;Open in new window&lt;/a&gt;
          &lt;a href="testpdf.pdf" &gt;Open in the same window&lt;/a&gt;
     &lt;/body&gt;
  &lt;/html&gt;
  </code></pre>
  
  <p>The links work fine in IE and FireFox, and the pdf is displayed, but in Edge a blank gray window is shown.</p>
  
  <p>If I embed the page in a frameset (old stuff, but the application is old!) then the link that opens the pdf in the same window starts working. The link that opens a new window fails the same way as before. <code>edge_bug_frameset.jsp</code>:</p>
  
  <pre><code>&lt;%@ page %&gt;
  &lt;!DOCtype html PUBLIC "-//W3C//DTD XHTML 1.0 Frameset//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-frameset.dtd"&gt;
  &lt;html xmlns="http://www.w3.org/1999/xhtml"&gt;
      &lt;head&gt;
          &lt;title&gt;Frames&lt;/title&gt;
          &lt;meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/&gt;
      &lt;/head&gt;
  
      &lt;frameset frameborder="0" framespacing="0" border="0"&gt;
          &lt;frame marginwidth="0" marginheight="0" src="edge_bug.jsp" name="heading" noresize scrolling="no"/&gt;
          &lt;noframes&gt;Your browser doesn't handle frames.&lt;/noframes&gt;
      &lt;/frameset&gt;
  &lt;/html&gt;
  </code></pre>
  
  <p><strong>Browser version:</strong></p>
  
  <p>Microsoft Edge 41.16299.15.0</p>
  
  <p>Microsoft EdgeHTML 16.16299 </p>
  
  <p><strong>Update:</strong></p>
  
  <p>I have noticed that the behaviour differs depending on the trust level of the server certificate in the web server. </p>
  
  <p>If the web server has an untrusted certificate (red shield and the text "Certificate error" next to the address bar) the pdf won't show and the behaviour is as described above.</p>
  
  <p>If the web server certificate has the lower trust level (grey padlock next to the address bar) the pdf won't show initially, but if I first choose to always allow pop-up windows, wait 10 seconds and then hit F5 (reload) the pdf is displayed. On subsequent attempts the pdf still won't show initially, but it is displayed after I hit F5 and I no longer need to wait 10 seconds before doing it.</p>
  
  <p>If the web server certificate has the higher trust level (green padlock next to the address bar) the pdf won't show initially but once I choose to always allow pop-up windows it always works.</p>
  
  <p>It should be noted that even though the pdfs are opened in new windows these new windows are NOT pop-up windows; a new window is opened when the user actively clicks on a link. </p>