https without a lock
I went to a youtube site "https://www.youtube.com/watch?v=EASmyA6F29s" and the favicon shows https without a lock. I thought this should not occur in firefox 22 according to the documentation
Why is https being shown without a lock symbol as it clearly is not secure? See enclosed diagram.
All Replies (4)
What does this Https field represent without a lock symbol?
Izmjenjeno
There is mixed content on that page.
Firefox only blocks active mixed content and if other mixed content like images are present then you still get the globe instead of the padlock.
You can see that in the Web Console (Firefox/Tools > Web Developer;Ctrl+Shift+K) as red lines.
Thanks Cor-el
I understand that content is mixed. Is it possible to prevent any non https from being displayed or accepted? Because https has no meaning if a user cannot determine which content is secure.
See:
There are these two pref that determine what content is blocked or passed
- security.mixed_content.block_active_content (true)
- security.mixed_content.block_display_content (false)