Ticket #439 (Open)Wed Jun 14 21:43:27 UTC 2017
Forum - mixture of SSL and non-SSL data
| Reported by: | Rick Murray (539) | Severity: | Minor |
| Part: | Web site: Beast (forum engine; forum pages) | Release: | |
| Milestone: | Status | Open |
Details by Rick Murray (539):
Browsers may complain (usually a broken padlock icon or somesuch) that forum connections are insecure despite the https-by-default behaviour of ROOL’s site.
This is because Gravatar, used for the user icons, is called with regular unencrypted fetches.
Here’s my icon as used by the forum: http://www.gravatar.com/avatar/cf8b50e3ff29f188…
The fix ought to be simple – just amend the forum to use https to Gravatar.
Here’s my icon as available with SSL: https://www.gravatar.com/avatar/cf8b50e3ff29f18…
