A grey lock with an orange triangle, but my SSL https code is compliant!

[dream_edition]

After receiving an eBay warning letter for not being HTTPS compliant, I spent £70 quid on a SSL certificate, activated it, waited for server to update [48hrs or so]. Changed all my links from http: to HTTPS: on all active listings [using eBay’s find and replace editor], checked them on eBay’s ‘iWays’site, all active listing were now compliant. Horay!!!

Using FireFox I went to one of my listings only to find the SSL indicator showing 'A grey lock with an orange triangle' why?

In FireFox I right clicked on 'description page' on listing, choose, Page Info, scrolled through images only to find a charity banner image had a HTTP: prefix not HTTPS: This was an eBay generated image.

I need to know if my uploaded content at fault or is it eBay automatic generated content? Thus, causing my listing not to have a GREEN SSL indicator?

e.g. look at the following listing: [using FireFox]

Eat The Rich (2000) Horror [DEd]

eBay item number:

202099643115

Page Info [right click]

i.ebayimg.com/00/s/NDkzWDE2MDA=/z/DMYAAOSw4GVYI7ne/$_1.JPG?set_id=8800005007

has a http: prefix not https:

.....can anyone advise me further?

[cee-dee]

I just checked that item number, I got a Green padlock and an https prefix to the link:-

https://www.ebay.co.uk/sch/i.html?_from=R40&_trksid=p2380057.m570.l1313.TR0.TRC0.H0.TRS0&_nkw=202099...

[dream_edition]

Thanks for checking, which browser are you using, chrome? As I use FireFox

[otherego]

Mozilla's take on this:

https://support.mozilla.org/en-US/kb/mixed-content-blocking-firefox?redirectlocale=en-US&as=u&redire...

Mixed content is not blocked: not secure

• : If you see a lock with a red line over it, Firefox is not blocking insecure elements, and that page is open to eavesdropping and attacks where your personal data from the site could be stolen. Unless you’ve unblocked mixed content using the instructions in the next section, you shouldn’t see this icon.

• : A grey lock with an orange triangle indicates that Firefox is not blocking insecure passive content. Attackers may be able to manipulate parts of the page, for example, by displaying misleading or inappropriate content, but they shouldn’t be able to steal your personal data from the site.

I suspect, but don't know for sure, that odd images (parts of adverts, perhaps) might be the offenders here. One would have thought eBay would block such stuff, but who knows?

Essentially, pages can be a mixture of secure and insecure elements, and this particular symbol flags potentially dodgy elements which are unlikely to interact with you dangerously. I think. (Goodness knows what happens if one clicks on an insecure element eg a picture within an advert linking elsewhere.)

When I open this forum's page, I get a green padlock. As soon as I click on a post, it changes to the grey lock/orange triangle. This appears on Seller Central as soon as I launch the forum's home page. Go figure, as they say.

Perhaps eBay's allowing insecure elements eg componenents of some ads) to load with the page hosting your listing. (I'm assuming the padlock responds to the whole page - not just to your listing.)

This'd complicate things, with green and yellow padlocks alternating as ads (or whatever) appear and disappear.

Hopefully, someone who understands all this witchcraft will be along with the correct explanation.

Sorry, but I'm not disabling my ad-blocker temporarily to find out. Last time I did that was nearly the last time I used eBay! Ugh.

[cee-dee]

I'm using Waterfox which is basically the same as FF.

This page (with an https prefix to the link) is showing a Black padlock with a yellow triangle and when clicked it comes up with "Connection is not secure. Parts of this page are not secure (such as images)".

[otherego]

A quick peek at "Page Source" also shows at least a couple of http bits. Perhaps someone with patience and a decent working knowledge of HTML might like to look in greater detail, and make suggestions - I'm not sure which bits might actually affect you. CeeDee might help here.

I also wonder about Facebook and Twitter links - I'm sure I saw reference to a Facebook http link in the View Page Source, and some odd comment about Twitter under View Page Information.

Must stroll into the rain for a little light exercise and fresh air. It'll be interesting to hear how you get on.

[dream_edition]

Thanks to all who had replied so far.

I guess I was irritated by a warning letter from eBay I received:

Immediate action required. Remove policy and/or security violations from your listings.

188 of your listings contain(s) non-secure HTTP content. From October 2017, Google Chrome - the browser used by almost half of all eBay buyers - will begin displaying a 'Not secure icon in the address bar' when users visit standard HTTP pages or HTTPS pages that include non-secure HTTP content. We encourage you to remove this content straight away

So, I get a SSL cert [£70], update all my active pages with HTTPS and still get a SSL warning icon, that in my opinion looks far worse as it more noticeable than just a grey lock. My concern is when I see this in a 'selling window', in my case I am penalised because I choose a charity that coming from eBay database.

'I'm sure that some of you have seen the advert on TV warning about shopping on sites without the 'Green lock'

Many of those who are selling the same product but without the charity banner are getting a green lock. How is that fair!

[dream_edition]

Update:Just had a on-line chat' with eBay, eventually got them to understand the problem. They did not accept fault though but, they will look into problem [....uh huh, sure]. It should be an obvious problem as anyone can just simply click around the eBay site and you will eventually see:

'A grey lock with an orange triangle' [In the address bar]

It's only an REAL issue when you see it on a selling page....and it may be ebays' coding at fault.

This won't bother most people but eBay should lead by example! especially before sending some sellers HTTPS compliance warning letters.

Thanks for all who have replied....this is something eBay needs to resolve.

"Even the eBay message spell checker does not recognise acronym HTTPS"

[mc0320]

**bleep**ing eBay red blue yellow green padlocks. What's this all about