Firefox is incorrectly identifying http pages as https and giving out failed security certificate warnings
I have a large http hundreds of information pages. I have a https shopping cart on another server designated https://shop.mysite URL. There are hundreds of links between the http server and https shopping cart server. Visitors can move between the two servers seamlessly.
The problem is that Firefox (latest version on Windows 7) sometimes mistakes the http pages as https - actually incorrectly adding https to the http URL, and then gives a stern warning to the visitor that my security certificate is invalid for a http page - - which of course it is not.
That I am aware of, no other browser makes this error on my site I am guessing Firefox is probably making the same mistakes with other sites which are both http and https.
Is this a Firefox programming error? What is the solution ?
Thanks!
All Replies (2)
If you manually edit the URL in the address bar to http (removing the s) and press Enter to load it, does Firefox force it back to https?
If that occurs: it can indicate that at least one page on that host sent Firefox a Strict Transport Security header requiring that all pages on the server be accessed using HTTPS. This is not a common problem, but may occur with some administrative interfaces or high-security applications.
Firefox does not have a user interface to clear this preference once it is saved. Unfortunately, the only way I know of to clear it is to use the drastic "Forget about this site" feature. More on that if you need it.
Or if I misunderstood the issue... If you have a reliable sequence of events to reproduce the problem, please post a link and instructions.