820063 - mixed content on https://www.mozilla.org/en-US/firefox/fx/

Status: RESOLVED FIXED

(www.mozilla.org :: General, defect, P3)

Description

[Kevin Brosnan [Ex-Mozilla]]

There is one non-ssl connection on https://www.mozilla.org/en-US/firefox/fx/

[11:03:55.374] GET http://videos.mozilla.org/serv/marketing/Firefox/Firefox%20Tabs_1.webm [HTTP/1.1 206 Partial Content 104ms]

Comment 1

[Chris More [:cmore]]

(In reply to Kevin Brosnan [:kbrosnan] from comment #0)
> There is one non-ssl connection on https://www.mozilla.org/en-US/firefox/fx/
> 
> [11:03:55.374] GET
> http://videos.mozilla.org/serv/marketing/Firefox/Firefox%20Tabs_1.webm
> [HTTP/1.1 206 Partial Content 104ms]

The videos.mozilla.org subdomain is non-SSL and the /firefox/fx/ is not forced SSL. There are other examples of this on www.mozilla.org and we didn't force it automatically redirect to SSL.

To resolve this and others on www.mozilla.org, we should only be using this video CDN:

https://videos.cdn.mozilla.net

We are currently investigating moving all www.mozilla.org assets to a SSL CDN and thus it may be taken care by this.

I will make this bug rely on bug 742890.

Comment 2

[Jennifer Bertsch [:jbertsch]]

I'm going to make this one block the Fx family work since it will include a redesign of /fx

Comment 3

[Kohei Yoshino]

Bug 798611 will resolve this issue.

Comment 4

[Kohei Yoshino]

Fixed by https://github.com/mozilla/bedrock/pull/966