No SSL padlock in firefox due to favicon

Hi All,

Firefox won't show the ssl padlock for my website because it's trying to load favicon.ico from http protocol.  Web Developer Tools->Console Error Loading mixed (insecure) display content on a secure page "http://domain.com/favicon.ico".  I get the expected secure page icons in the latest versions of other browsers I've tested - Chrome, Safari, IE, Opera.

Things I've tried, all tried along with forced reload Ctrl + Shift + r:
various <link> tags -
data url intended to stop the browser from looking <link rel="icon" href="data:;base64,iVBORw0KGgo=">
set the protocol <link rel="shortcut icon" href="https://domain/favicon.ico" type="image/x-icon">
non-protocol url <link rel="shortcut icon" href="//domain/favicon.ico" type="image/x-icon">
different file name <link rel="shortcut icon" href="/someothername.ico" type="image/x-icon">
no <link> at all
deleting the favicon.ico from the server

If I go to about:config and set browser.chrome.favicons to false and browser.chrome.site_icons to false I get the padlock but I can't expect users to do this.  :)

Thank you in advance for your time.
LVL 1
foxymoron7Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Sean JacksonInformation Security AnalystCommented:
Are you loading both secure and insecure content?  Try changing the code so it doesn't pull anything from an unsecure source and try again.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
foxymoron7Author Commented:
Thanks for your reply Sean,

I'm not loading any insecure content on the page, firefox is trying to "autoload" the favicon, even when it doesn't exist.  I've even tried hard coding the https protocol into a <link> tag for the icon with no luck.
0
Dave BaldwinFixer of ProblemsCommented:
I don't see that problem on my site at https://www.dibsiam.com/ .  Try that and let me know whether it works.  What version of Firefox?  Mine is just now trying to update to 32.0.3.
0
Cloud Class® Course: Microsoft Exchange Server

The MCTS: Microsoft Exchange Server 2010 certification validates your skills in supporting the maintenance and administration of the Exchange servers in an enterprise environment. Learn everything you need to know with this course.

Sean JacksonInformation Security AnalystCommented:
Perhaps give it a favicon?  (In the secure content folder)
0
foxymoron7Author Commented:
I'm a gigantic licorice flavored dum-dum.  I found an included file in my cms that had a <link href="http://... line in it.

Thanks Sean for having the right answer and thanks to Dave for subtly nudging me to look deeper.  Sorry to both of you for wasting your time on my mistake.
0
Sean JacksonInformation Security AnalystCommented:
Anytime.
0
Dave BaldwinFixer of ProblemsCommented:
No problem.  It's what we're here for.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Web Browsers

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.