Green Lock vs Yellow Caution/Page Not Sending to FB

Hello Alex,

Using the "Share" button for Facebook, most pages send to Facebook OK. Some send the site homepage instead notwithstanding the URL file path appears normal.
In these instances the https green lock icon has disappeared and an orange caution sign appears in its place in the browser URL field.
How may I fix this on the site?
All the content is good and the images are generated using Photoshop, "Save for web & devices" as with all the others.
What can be on these page that search engines interpret as insecure?

Regards,

Hi Alex,

This is a new learning curve for me.

I'm also confused

I got some info here:
support.mozilla.org/en-US/kb/mixed-conte...utm_source=inproduct
and here;
developer.mozilla.org/en-US/docs/Web/Sec...e_with_mixed_content

But I'm not sue that I fully understand the implications at the present time.

My site requires mixed content and I tend to get the impression that perhaps things are as they should be???
(Yes, I meant Browser. Sorry typo.)

I will however appreciate any further light that can be shed on this in simple to understand terms, if possible.

Re: The page that does not send correctly. It appears to be a separate or related issue. In this instance I did this:
Copied the article, trashed & deleted it and re posted it and the Facebook button now sends that page top Facebook.

Solved this one, still have questions re green lock & yellow caution.

Aren't all pictures insecure & can be copied?

Regards,

Hi Alex,

Many thanks for the comprehensive reply. I had to read it over but the nuances are beginning to make sense.
In Global Configuration>Server Settings, I have set to,Force SSL> Entire Site.

I notice that some pages such as cart the, No Mixed Secure green padlock appears.
On the blog page indeed the, Mixed content is not blocked: not secure grey padlock with yellow caution.

But I did nothing to set these. It appears automatic or I fluked something?

It would be nice to achieve the , Mixed content is blocked: secure if that's possible.
Reading as much as possible but I'm still not sure how or if it can be done.

Is there anything else I should be attending to?

Much appreciated,

Hi Alex,

Whew! It took a day of trying and testing but I've improved the site and developed a better working relationship with JFBC.

There appeared to be some quirky non responsive issues. Or my assumptions were incorrect. Anyhow I uninstalled JFBC in full and reinstalled a fresh JFBC v 7.0.2

Activated the JFBC plugins.

And ran Auto Tune which rendered all good.

I found that 'Social>Content Plugin-Like' appears on index page and deactivates the green lock.

I have deselected the buttons in 'Content Plugin-Like' and it stopped appearing on index page and green padlock has reappeared.

In preference I've activated JFB Social Share Extension on the preferred pages. It also changes the green padlock to Yellow Caution on the pages it is on.

Is there a way I can modify so it shows "Mixed content is blocked: secure," ie green padlock with grey caution? As per here: support.mozilla.org/en-US/kb/mixed-conte...utm_source=inproduct

Not sure how "Social>Content Plugin-Like" these differs from "JFB Social Share Extension" in purpose and function.
Are optional alternatives to each other?
Will they conflict if both are used?

Always value your feedback.

Regards,

Hi Alex

Thanks again for the good information.

Went through process methodically and if I read it right this appears to be what's happening:
• The issue seems to be coming from JFBC Social Share Module.
When this is disabled padlock returns to green on all pages.

However System - JFBCSystem must also be disabled.

Which sort of defeats the purpose and the Social buttons then do not appear,

JFBC Social Share > Position > Floating works best for my site.

But creates this issue.

In Modules > JFBC Social Share I tried disabling JFBC Social Share and these individually with no result.

• Facebook Options
• LinkedIn Options
• Google Options
• Twitter Options

No changes I make in JFB Component, ( including Force Scheme as: https:// ) appear to affect this.

I'm not currently using Auto Login.

When I run Auto Tune it is shows all green ticks & OK.

Also: (this is a bit out of my depth but for what its worth)

I checked the buttons using Firefox Developer Tools and View Page Source and noticed Open Graph was being served using the http protocol at top page (<html prefix="og: ogp.me/ns# fb: ogp.me/ns/fb# get_the_best: ogp.me/ns/fb/get_the_best#" xmlns="www.w3.org/1999/xhtml" xml:lang="en-gb" lang="en-gb" dir="ltr">(

• Facebook Options ---- not known
• LinkedIn Options ---- not known
• Google Options ---- appear to be serving up as "http" not "https"
• Twitter Options

---

appear to be serving up as "http" not "https"

Could it be that the browser is reading the http and therefore Firefox is interpreting hat these are not feeding in as https, but rather http. and therefore deems it to be insecure passive content.

This may be be the issue as per here: support.mozilla.org/en-US/kb/mixed-conte...utm_source=inproduct

and;

developer.mozilla.org/en-US/docs/Web/Sec...e_with_mixed_content
Where it states:
"How to fix your website
The best strategy to avoid mixed content blocking is to serve all the content as HTTPS instead of HTTP.
For your own domain, serve all content as HTTPS and fix your links.  Often, the HTTPS version of the content already exists and this just requires adding an "s" to links - http:// to https://.
For other domains, use the site's HTTPS version if available. If HTTPS is not available, you can try contacting the domain and asking them if they can make the content available via HTTPS."
In Component JFBC> Configuration> Advanced> I selected Force Scheme as: https:// believing this would do the job but it did not.

There appears no equivalent in the Module JFBC Social Share.

Hope I'm barking up the right tree and have given you information that is useful.

Regards,

Hi Alex,

Thanks for reducing it to simplicity for me.

This is the front page now back to green after I removed JFBC Social Share Module from displaying there: bestbluemountains.com/geeup/

Here are some other pages with the grey padlock:

bestbluemountains.com/geeup/food-drink.html

bestbluemountains.com/geeup/food-drink/1...nese-restaurant.html

Thanks again,

Best Regards,