Why is the connection for this part of the forum (Lounge) not secure?

XIII

Most parts of this forum:

However, for the Lounge:

Why is the connection for this Lounge not secure (while other parts of the forum are)?

This is with Firefox 51.0.1 (64-bit).

Stephen_C

@XIII I, too, am using the same version of Firefox as you (although with the HTTPS Everywhere extension) and do not experience the problem you mention. My connection to the Lounge is secure.

Stephen

pervel

I investigated a bit. The problem seems to be a specific avatar loaded from this thread:

https://discussions.agilebits.com/discussion/2846/new-product-request-1password-for-linux/p1

Specifically, it's the following user's avatar:

https://discussions.agilebits.com/profile/discussions/Zero2Cool

I have no idea why this happens. But maybe it can help the investigation.

AGAlumB

@XIII, @Stephen_C: Interesting. Thanks for bringing this up! I hadn't noticed that before. While the page itself is secure and has a valid certificate, Firefox is saying that some resources are not being transmitted over a secure connection. I'm not able to determine exactly what resources those are though. Perhaps some of them are being sourced from another AgileBits page — images, maybe? If so, that's probably something we can address. /cc @JasperP

pervel

The problem has resurfaced. The problem post seems to be this one:

https://discussions.agilebits.com/discussion/76940/

And the cause is this user avatar:

https://discussions.agilebits.com/profile/discussions/fcar

AGAlumB

@pervel: This appears to happen due to broken URLs for avatar images. Since the URL is invalid, the resource can't be delivered via HTTPS. We've removed it so it's just using the default avatar. Thanks for letting us know.