When I try to enable protections on a page, why will the "Enable Protection" not work?
The protection has been disabled on an investment site for some reason. I did not knowingly disable it. Now when I bring down the little menu that says I can enable protection, I push the button for "Enable Protection," it thinks for a while, and the gray lock with the red line across it remains in place. I have closed the browser and reopened it, and I have restarted the computer. Neither of these worked.
Chosen solution
The shield icon is for Tracking Protection and get a strike through when this protection is disabled. If the padlock gets a strike through then you likely access a website via an open HTTP connection or there is mixed content present on the page. It is best not to disable mixed active content because that enables scripts and other unsafe third-party content to get loaded.
Make sure these prefs are default and not user set (bold) on the about:config page
- security.mixed_content.block_active_content
- security.mixed_content.block_display_content
All Replies (10)
Hi, that is just for Tracking Protection : https://support.mozilla.org/en-US/kb/tracking-protection
If the grey padlock has what you say it is possible that the site does not use protection on that age but only for pages that you enter information to.
Please provide URL , no personal info or pages that need to logged into.
No, it is also on the page where I have to put in my username and password- information I certainly do not want to share!
The crossed-out padlock means that the web page is serving mixed content (some of the content being served by the page is not encrypted).
This is very common if a page is serving external resources (ads etc.) which are served unencrypted on an otherwise-encrypted page.
A lock with red strikeout if the current http page contains a password field. They do this to show that extra-sensitive information might be sent unencrypted.
Oh, I see Pkshadow is faster than me...
Hi bethyjean, a gray lock with a red slash is normal for:
- http:// address with a login form on the page -- as a workaround, try putting https:// at the beginning of the address to make a secure connection to the page so you can log in without risk of leaking your password
- https:// address with allowed "mixed active content" -- there is a line through the https showing that the page is not really secure (screenshot attached)
Are you encountering one of those?
Modified by jscher2000 - Support Volunteer
Chosen Solution
The shield icon is for Tracking Protection and get a strike through when this protection is disabled. If the padlock gets a strike through then you likely access a website via an open HTTP connection or there is mixed content present on the page. It is best not to disable mixed active content because that enables scripts and other unsafe third-party content to get loaded.
Make sure these prefs are default and not user set (bold) on the about:config page
- security.mixed_content.block_active_content
- security.mixed_content.block_display_content
I am seeing the second one. And when I try to "Enable Protection" nothing happens.
PKShadow. But this is a login page and I don't want my password exposed.
Also, this is a new occurrence. The page showed a green lock before.
Cor-el. I found those things you mentioned on the about:config page. They ARE bolded! How do I change that?
bethyjean said
Cor-el. I found those things you mentioned on the about:config page. They ARE bolded! How do I change that?
I'll jump in. Double-click each preference to flip its value back to the default value.