Solved

No SSL padlock in firefox due to favicon

Posted on 2014-09-24
7
648 Views
Last Modified: 2014-09-24
Hi All,

Firefox won't show the ssl padlock for my website because it's trying to load favicon.ico from http protocol.  Web Developer Tools->Console Error Loading mixed (insecure) display content on a secure page "http://domain.com/favicon.ico".  I get the expected secure page icons in the latest versions of other browsers I've tested - Chrome, Safari, IE, Opera.

Things I've tried, all tried along with forced reload Ctrl + Shift + r:
various <link> tags -
data url intended to stop the browser from looking <link rel="icon" href="data:;base64,iVBORw0KGgo=">
set the protocol <link rel="shortcut icon" href="https://domain/favicon.ico" type="image/x-icon">
non-protocol url <link rel="shortcut icon" href="//domain/favicon.ico" type="image/x-icon">
different file name <link rel="shortcut icon" href="/someothername.ico" type="image/x-icon">
no <link> at all
deleting the favicon.ico from the server

If I go to about:config and set browser.chrome.favicons to false and browser.chrome.site_icons to false I get the padlock but I can't expect users to do this.  :)

Thank you in advance for your time.
0
Comment
Question by:foxymoron7
  • 3
  • 2
  • 2
7 Comments
 
LVL 5

Accepted Solution

by:
Sean Jackson earned 250 total points
ID: 40342873
Are you loading both secure and insecure content?  Try changing the code so it doesn't pull anything from an unsecure source and try again.
0
 
LVL 1

Author Comment

by:foxymoron7
ID: 40342885
Thanks for your reply Sean,

I'm not loading any insecure content on the page, firefox is trying to "autoload" the favicon, even when it doesn't exist.  I've even tried hard coding the https protocol into a <link> tag for the icon with no luck.
0
 
LVL 83

Assisted Solution

by:Dave Baldwin
Dave Baldwin earned 250 total points
ID: 40342887
I don't see that problem on my site at https://www.dibsiam.com/ .  Try that and let me know whether it works.  What version of Firefox?  Mine is just now trying to update to 32.0.3.
0
Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

 
LVL 5

Expert Comment

by:Sean Jackson
ID: 40342891
Perhaps give it a favicon?  (In the secure content folder)
0
 
LVL 1

Author Closing Comment

by:foxymoron7
ID: 40342914
I'm a gigantic licorice flavored dum-dum.  I found an included file in my cms that had a <link href="http://... line in it.

Thanks Sean for having the right answer and thanks to Dave for subtly nudging me to look deeper.  Sorry to both of you for wasting your time on my mistake.
0
 
LVL 5

Expert Comment

by:Sean Jackson
ID: 40342917
Anytime.
0
 
LVL 83

Expert Comment

by:Dave Baldwin
ID: 40342933
No problem.  It's what we're here for.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Java 1603 Error 3 50
Parentel Control Software 9 61
URL for downloading Google Chrome for Win XP 2 118
Lenovo M90 + e-mail + browser? 11 30
Now-a-days, indirectly, postal services have been replaced by email services. Yes, whenever we hear the word "email" a lot of people only think of gmail. Some people still think that email and gmail are one and the same thing :-). Let's see some …
Introduction If you're like most people, you have occasionally made a typographical error when you're entering information into an online form.  And to your consternation, the browser remembers the error, and offers to autocomplete your future entr…
This Micro Tutorial will demonstrate how to add subdomains to your content reports. This can be very importing in having a site with multiple subdomains.
Shows how to create a shortcut to site-search Experts Exchange using Google in the Chrome browser. This eliminates the need to type out site:experts-exchange.com whenever you want to search the site. Launch the Search Engine Menu: In chrome, via you…

930 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now