   [web] Find out what's causing "this site contains both secure and nonsecure..."
  First off, I think IE's "feature" of warning the user of mixed secure/nonsecure content is dumb.  How often do you really need to encrypt your logo as it's sent over the net?  Whatever.Anyway, I'm getting this warning on one of my sites, and I can't figure out what's causing it.  I think it's sneaking in via an external &#106avascript file downloading some image without SSL.  How can I tell what content is causing the warning?   
  Easy. Get firefox, get the adblocker extension, go to your site and click on "adblock" in the bottom-right corner. It will show you all blockable elements, such as images and &#106avascript, with their full URL. Look for anything not strarting with https://   ;  Great idea, but there's a problem: All the items listed are https.  What else could be causing that warning in IE?   ;  Something has to be coming in on HTTP. It could be something as simple as a RSS feed. You could also try Firefox's "Live HTTP Headers" extension. That will show everything that is being loaded.   ;  Yes. RSS feeds or other linked content could cause it (check the HTML <head> section). Since that's not blockable content (no visible ads) they would not show in AdBlocker.   ;  The warning is quite legitimate I'm afraid.If a web page is part secure and part non-secure, there's no way that the browser can tell the user which parts are which.Therefore it simply gives them that warning. This includes images (which could contain sensitive data in principle), &#106avascript, CSS, plus anything else.In mozilla, use "page info" and "media" - to check that everything is coming via HTTPS.If you're using any third party bits via script elements etc, you'll have to remove them in HTTPS pages as they probably don't work through SSL.Mark   