8

When I access Stack Overflow via HTTPS, my browser (Firefox) complains that not all elements (images) of the web page portal are loaded via HTTPS, leading to some insecurity. Can this be fixed please?

1
  • 2
    HTTPS is not yet fully deployed. It's a work-in-progress. Commented Aug 9, 2014 at 16:06

2 Answers 2

9

This is first brought up in the question: Better HTTPS support for Stack Exchange sites in december 2011.

And re-surfaced earlier this year in Roadmap for HTTPS/SSL support

Nick Craver wrote the steps needed to implement SSL support across the network and Stackoverflow.com: the road to SSL

There are similar posts on MSE like Firefox SSL warning for data.stackexchange.com and SSL Errors on Stack Exchange

The team is aware and is working on it...

2
  • there's more links than anything else in this answer :0
    – CRABOLO
    Commented Sep 4, 2014 at 11:11
  • @lostsock I'll do everything for easy rep...oh wait, this is meta...
    – rene
    Commented Sep 4, 2014 at 12:03
-4

This error is due to the avatar images being loaded over http

Things like this: https://i.sstatic.net/te0lD.png

See that flower? Yup - That's not secured, and that's why your Firefox is complaining.

Interestingly enough, that flower is being loaded from https://i.sstatic.net/qj33e.png?s=32&g=1, and there IS a secure version of this at https://i.sstatic.net/qj33e.png?s=32&g=1


Ok - The avatar images - My mistake.

To those down-voting me - From the Firefox Console

https://i.sstatic.net/MePij.png

5
  • 1
    It's nothing to do with Gravatar. That image is hosted by SE in their Imgur account.
    – ChrisF Mod
    Commented Oct 10, 2014 at 16:17
  • I can only repeat this is nothing to do with Gravatar.
    – ChrisF Mod
    Commented Oct 10, 2014 at 16:24
  • Edited the original reply - Thanks.
    – Reelix
    Commented Oct 10, 2014 at 16:26
  • You're still saying that it's "due to the Gravatar avatar images" and "if it's something on Gravatar's side". These are incorrect statements. The images are being hosted by Imgur in SE's non-expiring account. It's these images that are being loaded over HTTP not HTTPS. If you look at the images actually hosted by Gravatar you'll see that they are loaded over HTTPS.
    – ChrisF Mod
    Commented Oct 10, 2014 at 16:28
  • I added a second edit to clarify the first edit, as well as edited the original post. I did not wish to originally edit the original post as that would subsequently invalidate the subsequent comments, hence the "- Edit" text as opposed to simply editing the comment outright...
    – Reelix
    Commented Oct 10, 2014 at 16:35

Not the answer you're looking for? Browse other questions tagged .