732378 - Website is not fully encrypted

Status: VERIFIED FIXED

(Mozilla Reps Graveyard :: reps.mozilla.org, task)

Description

[Giorgos Logiotatidis [:giorgos]]

Our website traffic is automatically redirected to https but we still load images from an http site (OSM), rendering our website not fully encrypted and FFX not placing the blue background next to our website's url.

Comment 1

[Ben (:bensternthal)]

Attachment: reps vs flicks, ssl icon

Comment 2

[Ben (:bensternthal)]

In addition to the OSM content it looks like the avatars and some google js is also sent via http.

I think the OSM content being over http is unavoidable and ok, however something else might be going on.

For example firefox flicks also has non http content (embeded video) but their ssl icon just has the warning. On reps we have a big red icon with a slash.

This might mean that our http content is flagged as possibly dangerous or there is an issue with the cert.

I'm adding sdonner to this bug, to see if he has some ideas.

Comment 3

[Stephen Donner [:stephend] Not actively reading bugmail]

Yvan said he'd take a look when he got a chance.

Comment 4

[Ben (:bensternthal)]

yvan ping on this one

Comment 5

[Ben (:bensternthal)]

Checking in on this one, also moving to release 0.2.5

Comment 6

[Ben (:bensternthal)]

yvan can you let me know if this is something you can look at. If not I can assign to another contact.

many thanks.

Comment 7

[Ben (:bensternthal)]

Yvan, can you look at this during the sec review for this version?

Comment 8

[Giorgos Logiotatidis [:giorgos]]

Ping! Any updates on this please?

Comment 9

[Ben (:bensternthal)]

Giorgos -> i was planning on having this completed/tracked as part of 0.3

If you want this looked at sooner let me know and I will escalate this.

Comment 10

[Giorgos Logiotatidis [:giorgos]]

OK! I was clearing up my bug list and show this one pending so I thought to ask. No need to push this before 0.3

Thanks

Comment 12

[Ben (:bensternthal)]

This is resolved, I no longer get the red icon. I just get the warning.

The warning is mixed content, for the HP this is caused by the blog feed as mentioned in the .3 sec review.

https://bugzilla.mozilla.org/show_bug.cgi?id=764450

Comment 13

[Aditya Jalgaonkar [:Adi_J]]

Verified