
Firefox address bar says some of my website pages are not secure even though they are
I confirmed with my host provider that my website is in a secure environment, but when I access three form pages that end in "php" there is a broken padlock icon in the address bar and says that the connection is not secure.
I checked other browsers (Edge, Chrome, & Brave) and all show a secure connection. So this only happens in the Firefox browser (v141.0). I'm using Windows 10 64bit.
Has anyone else had this issue? Any suggestions on how to fix?
The form is how my clients order on my website (no financial info is entered on the form, just data), and I fear that if they are using Firefox and see it's "not secure" they will leave.
All Replies (6)
This can be caused by loading resources in the page from cache. If you reload the page bypassing the cache (Ctrl+Shift+R), does the lock show as secure?
jscher2000 - Support Volunteer said
This can be caused by loading resources in the page from cache. If you reload the page bypassing the cache (Ctrl+Shift+R), does the lock show as secure?
No.
Okay, if you click the lock icon and explore the sub-menu(s) for any additional information, does it mention a specific issue like mixed content or anything else?
jscher2000 - Support Volunteer said
Okay, if you click the lock icon and explore the sub-menu(s) for any additional information, does it mention a specific issue like mixed content or anything else?
I didn't see any mention of "mixed content", but under Technical Details in the Security tab it says:
Connection not encrypted The website does not support encryption for the page you are viewing.
Maybe the page loaded on an insecure connection. If you pop up the Page Info dialog using Ctrl+i, does the address start with http:// or https:// (I suggest using Page Info because this information is hidden in the address bar by default)?
jscher2000 - Support Volunteer said
Maybe the page loaded on an insecure connection. If you pop up the Page Info dialog using Ctrl+i, does the address start with http:// or https:// (I suggest using Page Info because this information is hidden in the address bar by default)?
That was it. The pages were not "https". I changed the links and now they show as secure.
I saw there is an option under Settings>Privacy & Security to automatically allow HTTPS-Only mode. It must have been enabled by default in the other browsers which is why the pages loaded securely.
Thanks for all your help.