When I access Stack Overflow via HTTPS, my browser (Firefox) complains that not all elements (images) of the web page portal are loaded via HTTPS, leading to some insecurity. Can this be fixed please?
2 Answers
This is first brought up in the question: Better HTTPS support for Stack Exchange sites in december 2011.
And re-surfaced earlier this year in Roadmap for HTTPS/SSL support
Nick Craver wrote the steps needed to implement SSL support across the network and Stackoverflow.com: the road to SSL
There are similar posts on MSE like Firefox SSL warning for data.stackexchange.com and SSL Errors on Stack Exchange
The team is aware and is working on it...
-
-
@lostsock I'll do everything for easy rep...oh wait, this is meta...– reneCommented Sep 4, 2014 at 12:03
This error is due to the avatar images being loaded over http
Things like this: https://i.sstatic.net/te0lD.png
See that flower? Yup - That's not secured, and that's why your Firefox is complaining.
Interestingly enough, that flower is being loaded from https://i.sstatic.net/qj33e.png?s=32&g=1, and there IS a secure version of this at https://i.sstatic.net/qj33e.png?s=32&g=1
Ok - The avatar images - My mistake.
To those down-voting me - From the Firefox Console
-
1It's nothing to do with Gravatar. That image is hosted by SE in their Imgur account.– ChrisF ModCommented Oct 10, 2014 at 16:17
-
-
-
You're still saying that it's "due to the Gravatar avatar images" and "if it's something on Gravatar's side". These are incorrect statements. The images are being hosted by Imgur in SE's non-expiring account. It's these images that are being loaded over HTTP not HTTPS. If you look at the images actually hosted by Gravatar you'll see that they are loaded over HTTPS.– ChrisF ModCommented Oct 10, 2014 at 16:28
-
I added a second edit to clarify the first edit, as well as edited the original post. I did not wish to originally edit the original post as that would subsequently invalidate the subsequent comments, hence the "- Edit" text as opposed to simply editing the comment outright...– ReelixCommented Oct 10, 2014 at 16:35