trac.einsteintoolkit.org displays insecure content

According to Safari, https://trac.einsteintoolkit.org displays http content in addition to the https content. As a result, the page does not get the "https" icon, and appears to the user to be unencrypted. This persists on the login screen. As far as I can tell, the actual login (which uses CCT system passwords) is encrypted, but to discover this, I had to look at the page source and note that the form posts to https://.... I noticed that there is an unencrypted link to the trac servers for the trac logo. I don't know if this is the only http image on the site.

Keyword:

Comments (2)