connection not secure
-
@orayvis hmm. I haven’t been able to duplicate this yet, but do you only get that when your Blogs I Follow widget is showing a site that has the WordPress logo as their blog avatar?
-
Okay, I have duplicated it, and it is related to the default icon. Let me see if we can fix this.
-
Hello again faeriefiles,
I have added the modlook tag to this topic in order to get a staff member to look at anything that might cause this issue in the back end.
@orayvis, I do not have any SSL issues on your website, do other websites give you the same issue? Also does it only happen when you login?
-
-
-
@Supernovia , thank you for your help I’ll keep following to see what happens next.
@Orayvis , thanks for all your help too.
-
Great! Looks like that’s why I couldn’t replicate this issue on my end :)
I am glad things are looking like they will get fixed soon.
-
-
It is my pleasure, I am always learning more trying to help others.
I am sure the WordPress staff will fix this issue as soon as possible. This is simply due to an image being served from a non-SSL address instead of SSL.
Once I added the Blogs I follow widget on a test blog, I also had this issue pinpointing the culprit image http://s1.wp.com/i/logo/white-gray-80.png just like orayvis mentioned.
-
And see, I couldn’t see that until I followed a blog that didn’t have an avatar. I’m glad you were able to pinpoint this :)
-
You’re absolutely right I need to use more widgets to be able to help better :)
Have an awesome day/evening !
-
@supernovia & @ogurel If the use of the widget “blogs I follow” is causing this then it’s not the only thing causing it. I have searched my site and I don’t think I’m using the “blogs I follow” widget at all? If I am using it somewhere, I’m not aware of it. Thanks for you help and I know you’re already working on a solution just thought I should toss that out there too.
-
Hi @faeriefiles, your site won’t load over SSL because of the custom domain. Right now there is no way to apply SSL to a custom domain here, but it’s something we will do as soon as it’s feasible. And your admin areas will all be secure in the meantime.
If you definitely need your site served over https, you could make your wordpress.com domain primary, so your domain would redirect to it. That’s done here:
https://wordpress.com/my-domains -
@Supernova , I thank you for your help and please be patient with me as I’m self taught about everything computer related.
My admin page and even my sign in page are showing up as “connection not secure”. I put the screen shots on the blog I did concerning the problem.
When I visit my blog while signed out I don’t get any warnings. It’s only when I’m signed in that this is happening.
This has never been about needing my site to be served over https. I’m not even sure what you mean by “needing it to be served”. I thought it was running through your server?
I stuck to WordPress when purchasing all I need to make my site right and depended on ya’ll to make all the details of the site work securely together for me and so far you’ve done an excellent job of it. :)
All I really need is to be certain that when I log in and put my personal password and other data into admin panels etc that my information is secure.
I did not add code or change anything to the domain I purchased from you. I have only used your supplied aps etc. I suppose if the domain is the thing causing the security glitch then the safest thing for me to do is just cancel that upgrade?
I’ll go and make the domain change back to .wordpress.com as you suggested. Thanks for your help. Please put me on the list to notify should they get that error fixed. I do like having the faeriefiles.com but I can always move that one to another site if I need to. :)
-
Hello again @faeriefiles,
Could you do the following to see if there might be something else causing the security issues?
On Firefox or Chrome (any browser where you experience the issue), go to a page where you have the issue and then press the F12 key on the keyboard then select the Console tab on the open Developer Tools bar at the bottom of the page (alternatively you can also press CTRL+SHIFT+K to open the Console tab directly).
On the “insecure” page(s) you should see some lines regarding the cause for the security issue.
Could you please post those as images somewhere or copy paste the complete text of those lines? This could help us indicate whether this is caused by a plugin or something else.
Thanks a lot :)
Onur
-
@ogurel and @Supernova again, thanks for the help here is what came up on my admin page warning
Loading mixed (insecure) display content “http://1.gravatar.com/avatar/ad516503a11cd5ca435acc9bb6523536?s=256” on a secure page[Learn More] wp-admin
Loading mixed (insecure) display content “http://1.gravatar.com/avatar/ad516503a11cd5ca435acc9bb6523536?s=256” on a secure page[Learn More] build.min.js:15:0 -
@ogurel I assumed gravatar was the issue so I went and checked the setting on it and one of them still had my faeriefiles.com on it so I corrected that and now the admin page is good.
I then went to another page (email visible only to moderators and staff) and this warning popped up so I did the check again and this time got another warning.
Loading mixed (insecure) display content “http://s1.wp.com/i/logo/white-gray-80.png” on a secure page[Learn More] mnghostt.wordpress.com
This site makes use of a SHA-1 Certificate; it’s recommended you use certificates with signature algorithms that use hash functions stronger than SHA-1.[Learn More] cdn.api.twitter.coI have no idea how to fix that or if the error is even related to my site or to his I’m thinking it’s his?.
-
@faeriefiles It is indeed related to his website due to the Amazing People That I Follow section which is basically the Blogs I follow widget with a different title and therefore the same issue that the awesome @supernovia already reported up the chain :)
Once that issue is resolved everything should be right as rain.
For your site since you’re not selling anything or doing any “business” over your website, you don’t need to have SSL and can probably continue using your domain name as you seem to have solved the gravatar avatar issue.
- The topic ‘connection not secure’ is closed to new replies.
WordPress.com Forums 
