1352116 - SSL Cert Works For Everything Except RSS Feed

Status: RESOLVED DUPLICATE of bug 337897

(Firefox :: Untriaged, defect)

Description

[mileselam]

Attachment: Cert error on RSS feed

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:55.0) Gecko/20100101 Firefox/55.0
Build ID: 20170320030209

Steps to reproduce:

1. Go to https://geekspeak.org/
2. Go to any page on the site
3. Go to RSS feed at https://geekspeak.org/episodes/rss.xml


Actual results:

Valid LetsEncrypt cert and encryption for all pages except for RSS feed.


Expected results:

Since there is no special configuration for individual resources on the site, should have the same https settings. All other pages work as expected. Only the RSS file fails to encrypt.

I repeat, there are no security configurations on URLs, only a site-wide basis. No other browser fails to encrypt or displays an error when loading the RSS URL.

Comment 1

[mileselam]

Attachment: Cert without problems on same site

Comment 2

[mileselam]

Attachment: Verifying that RSS file is not loading insecure media

Comment 3

[mileselam]

Looks like https tainting from insecure assets, but they are internal to Firefox. Happens to NPR as well. It appears *all* RSS feeds on *any* secure site will register a cert error. Not just limited to ours.

https://www.npr.org/rss/podcast.php?id=344098539