With no "lock" or "HTTPS" showing up, how do I know in Safari if an online store is actually using a secure link when their web page makes that claim?

With no "lock" or "HTTPS" showing up, how do I know in Safari if an online store is actually using a secure link when their web page makes that claim?

Posted on Dec 1, 2013 9:38 AM

Reply
7 replies

Jan 22, 2014 10:45 AM in response to sancho_p

The link in your example - https://www.gmx.com/ - is loading non- secure content from http://themes.googleusercontent.com/


The lock will display only if everything on the page is secure - in this case it's not.


As Safari has no way of knowing if theme.googleusercontent.com is going to be transmitting or receiving content that should be encrypted, then the overall page is in no way secure, and as such Safari won't display the lock icon.


This is correct behaviour - it would be dangerous to users to identify pages as secure when they're clearly not.


Reloading the page above uses cached copies of the fonts, thus no insecure connection is required on the reload. The issue in the link above (GMX) is not a Safari issue, just really bad web development by whomever built the site and mixed secure and insecure content.

Jan 22, 2014 1:43 PM in response to BenJamieson

Not sure if I can understand that.

The requested page was https://target.site. This connection has to be encrypted.

I want to see a lock when there is SSL traffic.


Whatever else is to be loaded in that context:

If Safari can’t make sure it can handle fonts or images in a secure way (e.g. read only) it should not load them and show me a warning, or a hint to use an other browser.


Already IE7 was asking if I want it to load the “insecure part of the page”, but was properly working in https when I denied, just ignoring that part.

Jan 22, 2014 4:31 PM in response to sancho_p

Sorry... you want to see a lock indicating a page is secure... on a page that isn't secure.


Um... OK.


Good luck with that.


Safari can't change URL's wihtout your permission (rightly so) and has a choice - load the page or not.


It chooses (rightly) to load the page, but it doesn't claim it to be sucure when it's very far from being secure.


What world do you live in where that's a 'bug'?


Again, incompetent web developers are the cause here, not Safari.


Either your page is secure, or it isn't. There's no grey area here.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

With no "lock" or "HTTPS" showing up, how do I know in Safari if an online store is actually using a secure link when their web page makes that claim?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.