Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

HTTPS-Everywhere: how to understand "(partial)" encryption?

  • 7 replies
  • 3 have this problem
  • 1 view
  • Last reply by cor-el

more options

Can I see which parts are encrypted and which parts of the websites are not encrypted if status is (partial)?

Can I see which parts are encrypted and which parts of the websites are not encrypted if status is (partial)?

All Replies (7)

more options

hello uTZ8qQW, yes you can open the web console under tools > web developer & enable net logging. while a new page is loading this will this will show all elements that are not encrypted (=mixed content).

firefox now also has the possibility to block mixed content by default - for some information about it see www.ghacks.net/2013/04/09/firefox-23-to-block-insecure-contents-from-being-loaded-on-https-pages/ for example. however at the moment i'd only recommend to block active content, since there are still many secure sites that embed pictures & videos through a non-encrypted connection - blocking mixed display content would break the functionality of such sites (youtube,...).

more options

I do not see "enable net logging" anywhere.

I am using default Firefox that comes with Ubuntu 12.10

edit: I opened "Web Console" and enabled all logs, I still don't see red warnings about insecure content.

Modified by uTZ8qQW

more options

ok, i've just tested it again on firefox 20 on windows and it works whether the net button is activated or not (see screenshot)- the warnings about mixed content will appear while a page is loading.

you probably need a firefox that is up to date - i don't know which firefox version shipped with ubuntu 12.10, but there should be updates to the application available through the packet manager of the OS...

more options

Firefox Nightly 23.0a1 (2013-05-09)

more options

which site are you trying to access - is it the same on the test page? (you can disable the logging of net, js, css & logging content): https://ie.microsoft.com/testdrive/browser/mixedcontent/assets/woodgrove.htm

more options

progress, I can see blocking of one js:

more options

See also:

Firefox has two prefs to control mixed content.

  • security.mixed_content.block_active_content
  • security.mixed_content.block_display_content