why is CID doing this?

So I use ice dragon, and mostly on facebook i see the ‘‘lock’’ symbol in the address bar that says i have a secure conenction to a verified site, but occasionally the lock will change to an exclamation mark, and say it is an unsecure non licensed site…it’s still fb though…what’s the problem here?
thanks
Mod edit: Corrected the topic title, Captainsticks.

bump

Hi princetongrad24,
First up I presume we are talking about IceDragon as stated in the opening post and not Dragon as the title and location suggests?
This could be due to mixed content.
Mixed content-Mozilla Forum

You could try to force secure connections.
Force Secure Connections-IceDragon Help

Hope that helps.

Hi, yeah Ice not just regular Drag. The weird thing is, that it sometimes not always shows the exclamation, but on the right it has the green lock saying connections are forced secure. I also, on this site for instance see a globe and it says no identity info is secured.

ok this is really weird, it’s now doing it on my email account. it starts off as a lock on the left hand side of the address bar, then changed to an exclamation as i click through emails. is this bc of images? did someone hack my computer , or is this normal? same with fb in my original post, connects secure then changes.

Hello,

As captainsticks mentioned in his reply the exclamation mark could be displayed because of mixed content (links and content from other websites that do not use SSL certificates). Another reason could be domain validated certificates. IceDragon displays the warning sign next to the padlock for this type of certificates.

Please do not mistake our HTTPS enforcement functionality with an actual validation check for the SSL certificate. SSL validity information is displayed to the left side of the address bar and in the “Page details” dialog.
HTTPS enforcement only forces the browser to use HTTPS for domains that you select yourself. This means that if you ever click an http link for a website that you have previously included in the “forced https” list, the browser will automatically use the https protocol.

Regards.

thanks for the reply. what if i have ‘‘force htps on all subdomains’’ ill it do it for everything? i have no specified http addies to force https, but i notice it shows https in the bar anyway. what if there is no valid certificate but im still forcing https?

I also want to say that unfortunately my original question still isnt answered. maybe i explained it wrong. What i’m asking is that sometimes i will get the secure padlock on the left showing the certificate, and sometimes i will get the exclamation FOR THE SAME SITE. like on the facebook log in page, or the youtube log in page, it can vary…and lately ive been seeing the exclamation more. my email too, i notice it changes. itll be the padlock on the log in page, but then when i click around on my messages it turns to exclamation. if i click the home bjtton it shows a padlock but once again once it refreshed to email shows the exclamation\ mark.

is this a result of hacking?

Thanks, I have now moved this to topic to the appropriate section and renamed the topic to suit.
Help-CID

this section dosnt have as much traffic as the other, so i am not going to get an answer =(

The developers look at both sections and you will get more accurate results if it is listed in the correct location. :slight_smile:

Kind regards.

Hello princetongrad24,

I’ve been able to reproduce the issue but at a very reduced rate.
This is the scenario for which the issue reproduced without any extensions installed:

  1. Navigate to Youtube.com
  2. Click the “Sign in” button

Padlock is ok

  1. Click the “Back” button in the browser
  2. Click the “Sign in” button again

Warning sign is displayed instead of the padlock

The sign in page for Youtube has a valid certificate, it does not seem to contain trackers or unsafe content from other domains. Also, the issue reproduces very rarely with this scenario. Also refreshing the sign in page after step 4 reveals the padlock once more.
The issue also reproduces for Firefox so it seems the certificate detection fails sometimes.

You might also want to check your extensions. Some of them inject code into the page to be able to provide you their functionality. This can cause the browser to think there is insecure content on the page and display the warning sign.

Regards.

i disabled my skin for ice dragon, but unfortunately it is still doing this. it is so random too…and even for this site, comodo.com i once saw the green security info for comodo security solutions, but most of the tmes i just see the gray globe on this site.

But facebook for instance, sometimes it will show the padlock on the sign in page, but as soon as i sign in it will change to the exclamation. I will then go to my bookmarks and select facebook, and it will change to padlock for a little while, and eventually change again to exclamation. So weird.