Site Security

[gareth]

Hi guys

Some of your affiliate adverts are coming through over http rather than https, which will cause certain browsers to give security warnings about mixed security content. Some versions of certain browsers will end up giving warnings about the site being insecure and show the padlock SSL symbol with a cross through it. I imagine you are using an ad plugin for xenforo that rotates advert so tracking it down will be fun....

Had the same thing on one of my forums so I know it's a pain...

an example from a moment ago is "http://ad.afy11.net/ad?mode=7&publi...EBAQE&expiration=1527183521&external_user_id="

 

[jcat]

Thanks! I've brought your post to Anne's attention.

 

[Anne]

Hi guys

Some of your affiliate adverts are coming through over http rather than https, which will cause certain browsers to give security warnings about mixed security content. Some versions of certain browsers will end up giving warnings about the site being insecure and show the padlock SSL symbol with a cross through it. I imagine you are using an ad plugin for xenforo that rotates advert so tracking it down will be fun....

Had the same thing on one of my forums so I know it's a pain...

an example from a moment ago is "http://ad.afy11.net/ad?mode=7&publi...EBAQE&expiration=1527183521&external_user_id="

I can't see the screenshot for some reason. Can you please try and attach another if you see it again? I'm using Chrome and occasionally Firefox and never had a warning about TCS. And the site has the secure symbol for me in both browsers -

 

[gareth]

Hi Anne

the problem won't appear in chrome if you have the headers to redirect http to https or not show http elements. It will appear in firefox by default, but only when the mixed content is intermittently loaded.

I bet the link I put in the post DID work (you didn't get a 404 page) but you just got a blank page because it s single pixel affiliate ad.Given that it was an http link you SHOULD have seen an error because your page as an SSL protected site shouldn't be loading anything HTTP. Unforutnately it is.

what you users will intermittently see is this

If you dig into the code of the site you can see certain elements not being displayed through https, which is why we are seeing this.