CODEWITHSUNDEEP
https
learningtech
learningtech

Reputation: 33715

Easy way to determine what content is not delivered using a secure HTTPS connection?

I have some pages that are sent via HTTPS. Internet Explorer sometimes complains about "This webpage contains content that will not be delivered using a secure HTTPS".

I looked in the html source to confirm all content calls (href, src, etc...) are sent via https. My CSS files use relative paths. But I'm still getting these warnings.

Is there an easy way to track down which items are not sent via HTTPS?

Upvotes: 10

Views: 18974

Answers (7)

josh3736
josh3736

Reputation: 145002

You could fire up Fiddler to see what exactly IE is requesting over regular HTTP.

In Fiddler's default configuration, HTTPS requests will show up with a lock and CONNECT as the host. HTTP requests will have a non-lock icon.


(source: josh3736.net)

Upvotes: 10

Alex from Jitbit
Alex from Jitbit

Reputation: 60812

You can use SslCheck

It's a free online tool that crawls a website recursively (following all internal links) and scans for unsecure content - images, scripts and CSS.

(disclaimer: I'm one of the developers)

Upvotes: 3

Unpossible
Unpossible

Reputation: 10697

In Google Chrome, similar to Firefox w/ FireBug, you can use the 'Network' tab of the Developer Tools console.

Open the Developers Tools console, go to the 'Network' tab, and reload the target page. Any warnings with the page, such as insecure content being loaded, will be indicated with the number of warning and an 'alert' icon in the bottom right corner (Chrome v23.x). Click on the icon and a list of the warnings, in this case, the resources being loaded insecurely, will be displayed.

enter image description here

Upvotes: 2

dochoffiday
dochoffiday

Reputation: 5575

I've used the following site before - I finding it easier than loading up firebug / fiddler.

http://www.whynopadlock.com/

Upvotes: 3

Geek Num 88
Geek Num 88

Reputation: 5312

using firefox - view generated source vs viewing source

there is probably a javascript file that is creating a div/iframe that is insecure

Upvotes: 1

Dewfy
Dewfy

Reputation: 23634

Using following tools could help:

  • Firefox's FireBug . opening tab Network shows you connection details to multiple resource
  • Fiddler - acts as sniffer allows you explore details of connect.

Upvotes: 1

Mauricio Scheffer
Mauricio Scheffer

Reputation: 99750

I usually use Firefox + Firebug (the "Net" tab) to find the offending request. You could also use Fiddler for this. (with any browser)

Upvotes: 5

Related Questions