My company uses SalesForce and ExactTarget. Our sales people are getting security warnings because the ExactTarget app and or Salesforce renders an iframe in HTTP instead of HTTPS. We've checked the ssl settings in exactTarget and it is turned on. If you request the url of the iframe, exacttarget forces you back to ssl so I think exact target is set up correctly.
I cannot for the life of me figure out if there are any settings for ExactTarget within salesforce.
(Note: I am just a lowly software developer at our company and as such, have no idea how to use the giant piece software that is SalesForce.)