When I'm on, for example, the secure SO site, and then open the "StackExchange" drop-down, links to other SE sites include their "https" equivalent as well, which is expected. (If I'm on the the regular http site, then the links are all http.)
But links to questions via the "Inbox" and "Achievements" drop-downs lead back to the insecure, http equivalent, even when I'm on a secure page.
Can those links be generated in such a way that we're kept on the secure version of the site?
https://
...look at the source, they are simply//
which means "whatever the page is using" (google protocol or scheme-relative URLs for details). We're getting things ready, but there are still many, many things to deploy to get there. It's not simple with user-submitted content, a lot more pre-reqs have come up since that original blog post.http://
rather than//
(at least the inbox notifications are, the links to other sites are still//
).