this page is trying to load scripts from unauthenticated sources

[tonygg]

Hi. I have just started to see in the chrome browser the warning "this page is trying to load scripts from unauthenticated sources". It may have been there for some time as it is just a little indicator on the RHS of the address bar. It doesn't sound good. There seems to be no explanation of which scripts are insecure. I checked on google webmaster tools and it says there are no issues on my site. It seems to be on all pages.

I am at a loss to know how to track down the problem. I would be very grateful for some help or pointers to track down the problem?

Many thanks

[Goz]

A URL would be good....

[tonygg]

Hi. Sorry. it is our website https://www.secretgardenquilting.co.uk/

I tracked down the problem with the help of our hosting provider. It is the Favicon:

<link rel="shortcut icon" href="<actinic:variable name="CatalogURL" />favicon.ico" type="image/x-icon" />

It should pick up the website URL in network setup. CatalogURL is taken from that field according to the help document. It does not seem to do that.

I hard coded it to:

<link rel="shortcut icon" href="https://www.secretgardenquilting.co.uk/favicon.ico" type="image/x-icon" />

This got rid of the problem.

[NormanRouxel]

You also have 2 links to http://www.secretgardenquilting.net/local-shops.html that are not https. They won't be causing errors as they are links but they take the user to a non https page.

[tonygg]

Hi Norman. Hope all is well. Thank you. I guess when you redirect outside the website google doesn't complain in the same way as internal links. This is just a separate site we had to build up back links. I don't really want to pay for SSL on it as it doesn't get much traffic. Many thanks

[Goz]

I'm confused Tony.... your site already has SSL

[tonygg]

Hi. yes my site is SSL. However there was the code in the site <link rel="shortcut icon" href="<actinic:variable name="CatalogURL" />favicon.ico" type="image/x-icon" /> which was being uploaded by sellerdeck as http://www.secretgardenquilting.co.uk/favicon.ico. This was causing google to view all pages on my site as trying to load scripts from unauthenticated sources. I have no idea why but when I replaced it with the hard coded <link rel="shortcut icon" href="https://www.secretgardenquilting.co.uk/favicon.ico" type="image/x-icon" />. The google message went away. It seems sellerdeck is not resolving CatalogURL correctly.

[Goz]

I was confused about the

I don't really want to pay for SSL on it as it doesn't get much traffic

bit

[tonygg]

Sorry. The link that Norman was pointing out was to another site (SecretGardenQuilting.net). The site is a very cut down version of the main site. It has a few static pages and then shows the dates we do pop up shops (1 single page of dates on that site). It is hosted by another provider and was setup to provide back links. I didn't want to pay for an SSL as it does not have any products to sell. If it became an issue we could just close it down. Not sure if that makes it clearer?

Many thanks

[Mike Hughes]

The issue with CatalogURL not picking up https: was supposedly addressed a couple of years ago in 16.0.2 See. https://community.sellerdeck.com/for...returning-http but it's not clear to me if that fix got CatalogURL working with https: or just that the alternative variable SSLCatalogURL now works correctly.

Unfortunately the release notes for 16.0.2 don't help.