1

The favicons for Area 51 and Stack Exchange that are shown on sites marked "beta" in the Site Stats widget are using http:// URLs for favicons when visiting the sites over HTTPS.

stats widget

Mixed Content: The page at '...' was loaded over HTTPS, but requested an insecure image '...'. This content should also be served over HTTPS.

These are the links requested:

They should be using something protocol-agnostic.

  • +1 another good find and you notice that images/icons are now served from CDN location and that's also in the plan – HackerKarma Sep 1 '15 at 14:52
  • 1
    @HackerKarma I may have been bugging the devs privately about this for a couple of months beforehand :p – Amelia Sep 1 '15 at 14:52
4

A fix will go out for this shortly. We try and fix https issues as they come up, however we haven't performed a full audit of all urls. HackerKarma is right, it's part of the "plan".

1

I agree with you that SE should be using something protocol-agnostic. As per the answer given by Anna Lear: (copied only relevant part)

Because HTTPS support is still a work in progress. We're upgrading parts of the code as we go along. For example, user avatars are served over HTTPS now.

We should use protocol-relative URLs more, I agree,

Also from the comment:

All the assets we use will eventually use the appropriate protocol. That's (part of) the plan. :)

So, basically it's a work-in-progess and that's a good news.

  • I'm... confused why this needed to be an answer. Isn't the crux of it simply "it will happen eventually"? – hichris123 Sep 1 '15 at 20:42
  • @hichris123 I did not get it... I have seen few questions similar to this issue. The best thing I can do is at least share my findings about the issue. I have seen many high reps. do the similar. – HackerKarma Sep 1 '15 at 20:57

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .