Why are most icons HTTPS??

[Dude111]

Im not seeing any images here now,THERE IS ABSOLUTELY NO REASON TO HAVE HTTPS ON THE IMAGES HERE.......

https://d39pklu5rpk118.cloudfront.net/forums/images/misc/navbits_start.gif

I dont see that but I see this fine

http://d39pklu5rpk118.cloudfront.net/forums/images/misc/navbits_start.gif


Totally insane how ppl are letting the mainstream BS make them do this stuff that isnt needed!

This is what I see now...... (A box with an X instead of the image)

 

[Thunderknight]

Is there a reason you can't load https:// images on your browser?

Do any https:// pages work on your browser/PC?

 

[mikewazowski]

Icons are showing up fine for me.

Hopefully Lindsay will chime in but I don't think there's been any recent changes to the forums.

 

[webstar22]

Im not seeing any images here now,THERE IS ABSOLUTELY NO REASON TO HAVE HTTPS ON THE IMAGES HERE.......

https://d39pklu5rpk118.cloudfront.net/forums/images/misc/navbits_start.gif

I dont see that but I see this fine

http://d39pklu5rpk118.cloudfront.net/forums/images/misc/navbits_start.gif


Totally insane how ppl are letting the mainstream BS make them do this stuff that isnt needed!

This is what I see now...... (A box with an X instead of the image)

You are running windows XP on 800x600 https is the least of your worries.

 

[hfxChris]

You are running windows XP on 800x600 https is the least of your worries.

Looks more like 2000 or ME to me...

 

[wtp]

i still think

it might be XP IE 6

 

[N9PBD]

RadioReference serves mixed content pages (both HTTP and HTTPS), but according to Mozilla (https://developer.mozilla.org/en-US/docs/Security/MixedContent): "Mixed Passive/Display Content is content served over HTTP that is included in an HTTPS webpage, but that cannot alter other portions of the webpage. For example, an attacker could replace an image served over HTTP with an inappropriate image or message to the user. The attacker could also infer information about the user's activities by watching which images are served to the user; often images are only served on a specific page within a website. If the attacker observes HTTP requests to certain images, they could determine which webpage the user is visiting." In this case, RR is doing the opposite, serving the webpage over HTTP, and portions of the content (icons in this case) via HTTPS.

That still doesn't explain why RR choses to serve the majority of its content via insecure methods. Google is an example of a mainstream website that is moving users to HTTPS, even if they specify HTTP in their requesting URL.

TLS 1.2 or better (SSL is broken), is the best choice to protect your browsing.

 

[Dude111]

Icons are showing up fine for me.

Hopefully Lindsay will chime in but I don't think there's been any recent changes to the forums.

Well he might have done it months back Mike,I havent been here in about 6 months or so..

Yes i can load SOME https stuff Thunderknight but the point is THERE IS NO REASON FOR IT!!!!!!


There is nothing PRIVATE on this site needing HTTPS!!! -- HTTPS is for banking,etc......