Support » Plugin: Auction Nudge - Your eBay on Your Site » Requesting insecure images

  • Resolved JapeNZ

    (@japenz)


    Hi there,
    I’m getting the following message on my listings page for each of the thumbnails:

    Mixed Content: The page at ‘https://www.comicbookshop.co.nz/auctions/’ was loaded over HTTPS, but requested an insecure image ‘http://thumbs3.ebaystatic.com/m/mRv0wunn_CBTJrFN7bjEIMg/140.jpg’. This content should also be served over HTTPS.

    I spotted in the help page that I need to apply this:
    <script type=”text/javascript” src=”https://www.auctionnudge.com/
    but I can’t work out where it needs to go.

    Any help would be very much appreciated.

    Kind regards,
    JP

    https://wordpress.org/plugins/auction-nudge/

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Author Joe Hawes

    (@morehawes)

    Hi JP,

    Thanks for reaching out. This is not an error, but unfortunately a limitation caused by eBay not hosting the item images used by the feed on a secure domain. As explained on the Auction Nudge Help page (https://www.auctionnudge.com/help#faq-ssl):

    Unfortunately, as eBay do not have a SSL certificate for the domain where they host item images, you may see some “mixed content” warnings when viewing your site using HTTPS. This is nothing to worry about, and just means that the item images are being received unencrypted (i.e. over HTTP and not HTTPS)

    There is not a work-around for this at this time I’m afraid.

    Thanks,

    Joe

    Hi Joe,

    I’m using your plugin on a non word press site and I am getting mixed content therefore my ssl certificate is saying its not secure for that reason. You say eBay don’t have a SSL certificate for this domain, not show if things have changed in the last 6 months since you wrote this, but they do have an SSL for that domain e.g. https://thumbs1.ebaystatic.com/m/m_0CLgGpR5Xd9cqXX9lUa_Q/140.jpg

    Can you update your plugin to reflect this??

    Plugin Author Joe Hawes

    (@morehawes)

    Hi gutigrewal,

    Thanks for brining this up. It appears that eBay have made some changes to the SSL certificate situation on some of their image assets, which I was unaware of.

    I will investigate further, however as item images come from multiple domains (not just *.ebaystatic.com) and the certificate eBay are using has a ‘weak’ SHA-1 signature this will require a lot of testing to ensure a smooth transition for all Auction Nudge users utilising the HTTPS feature.

    I therefore can’t give an ETA for this just yet.

    Thanks again,

    Joe

    Hi Joe,

    Thats great thanks. Will keep an key out!

    Thanks,
    Guti

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Requesting insecure images’ is closed to new replies.