https without a lock
I went to a youtube site "https://www.youtube.com/watch?v=EASmyA6F29s" and the favicon shows https without a lock. I thought this should not occur in firefox 22 according to the documentation
Why is https being shown without a lock symbol as it clearly is not secure? See enclosed diagram.
所有回复 (4)
What does this Https field represent without a lock symbol?
由user226514887665625432230708206477982186438于
There is mixed content on that page.
Firefox only blocks active mixed content and if other mixed content like images are present then you still get the globe instead of the padlock.
You can see that in the Web Console (Firefox/Tools > Web Developer;Ctrl+Shift+K) as red lines.
Thanks Cor-el
I understand that content is mixed. Is it possible to prevent any non https from being displayed or accepted? Because https has no meaning if a user cannot determine which content is secure.
See:
There are these two pref that determine what content is blocked or passed
- security.mixed_content.block_active_content (true)
- security.mixed_content.block_display_content (false)