security warning

• 

  mapparoo · Member · Nov 9, 2021 at 4:38 am

  • Copy link
  • Add topic to favorites

  Not sure why people are getting a security warning before loading the site.

  WP.com: Yes
  Correct account: Yes

  The blog I need help with is: (visible only to logged in users)

• 

  amirudra789 · Member · Nov 9, 2021 at 4:42 am

  • Copy link

  Hello

  All WordPress.com sites have SSL certificates for free and the above shared site URL show secure at my end, Could you please check this and let us know if I am missing anything.

  Also if you are referring to some other site URL please share with us so we can assist you better.

  Regards:

• 

  hughfordb123 · Member · Nov 9, 2021 at 4:44 am

  • Copy link

  Hi there,

  I’m not getting a security warning when I click the link. But this should never happen once you’re using WordPress.com. In the event you’re experiencing this or are still receiving reports please go ahead and contact support

  Let me know if this still persists, thank you.

• 

  hughfordb123 · Member · Nov 9, 2021 at 4:48 am

  • Copy link

  My bad, I realized that the contact support takes you here. To improve on the suggestion I’ve gone ahead and attached the modlook tag for WordPress.com’s team to assist you as soon as possible. I hope this helps

• 

  kokkieh · Staff · Nov 9, 2021 at 5:52 am

  • Copy link

  Hi there,

  I don’t see any security warnings when I visit your site.

  Can you tell me the exact wording of the warning/error you see? If possible, can you take a screen shot of it? Upload that to your media library and we’ll be able to see it there.

  In what browser are you seeing it? Do you see the same/a similar warning if you use a different browser?

  Lastly, what is the exact URL you type into your browser/that you provided to people, that leads to this error? I checked both https://portlandear.wordpress.com/ and http://portlandear.wordpress.com/. The former shows no errors, and the latter correctly redirects to the https version for me, also without any errors.

  
  @hughfordb123

  But this should never happen once you’re using WordPress.com

  That’s not entirely accurate :)

  If someone embeds content on their site from a third-party link that uses http instead of https, most browsers will show what’s known as a mixed-content warning. In other words, a warning that indicates that, while the site is secured with https, there is some content on the site that’s not secured, as it’s being loaded from somewhere else and not covered by the site’s SSL certificate.

  https://www.howtogeek.com/181911/htg-explains-what-exactly-is-a-mixed-content-warning/

  On WordPress.com we most often see this if people hot-link to images hosted somewhere else, instead of uploading the images directly to their media library. But I don’t see any hotlinked images on the OP’s site, and the only embed is a Google Calendar embed that uses https, so it would not cause any warnings.

• 

  hughfordb123 · Member · Nov 9, 2021 at 7:28 am

  • Copy link

  Interesting, thank you for the update