Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

In Chrome when I view my page the https in the URL has a red slash through it. When I click it, it says:

Your connection to is encrypted with 256-bit encryption. However, this page includes other resources which are not secure. ...

I am not getting the mixed content warning in IE or FF.

Is there a way to get Chrome to tell you exactly what/where is causing the issue?

I am having trouble finding what is causing Chrome to throw a hissy fit. I searched my source for any http that does not contained https but am not seeing any. It would be nice if there is an easy way to pinpoint the issue.

share|improve this question
Did you try clearing some of your browsing data? – Moab Sep 27 '10 at 21:00
@Moab I believe that was the issue. – JD Isaacks Sep 27 '10 at 22:48
Thanks, wonder why Randolph got 2 votes for not answering the question. – Moab Sep 28 '10 at 1:34
I haven't seen this but I would guess that it means that the encryption key is not signed digitally by a valid authority. – Benoit Dec 20 '11 at 8:16
@Benoit It could also indicate that the site is serving mixed content (e.g. content is https, but images are http). Hard to tell without context. Raj, do you have a specific URL to give as an example? – Tim Post Dec 20 '11 at 8:17

If you simply click on the lock symbol next to the struck through "https://", it will tell you what it means.


If you click on the lock symbol, it opens an information window that tells you about the encryption type of your connection to the website and about the giver of the certificate signature. It also tells you when you first visited the website.

share|improve this answer
+1 good point. An approach that can be useful other contexts as well. – Kris Dec 20 '11 at 9:23
This is a good point, and I'll agree that this isn't a very discoverable UI element, but this approach isn't very useful as an answer. What does it tell you? – Kevin Vermeer Dec 20 '11 at 14:49

The dialog which appears after clicking the lock will bring you more detail. At the moment, you can reproduce this behavior (safely) by navigating to, but I'll walk you through the process and describe what the documentation means. Clicking the lock produces the dialog:

enter image description here

What do these mean points to, which reads:

The site uses SSL, but Google Chrome has detected either high-risk insecure content on the page or problems with the site’s certificate. Don’t enter sensitive information on this page. Invalid certificate or other serious https issues could indicate that someone is attempting to tamper with your connection to the site.

In this case, it's present because the (valid) certificate is for *, and doesn't match. That's a problem with the site's certificate. It's not a big deal; you really don't need SSL for most purposes on Superuser, and I'm fairly confident that the people behind * are the same people behind Superuser. In other cases with this same cause, such as signing itself with the certificate used for, the warning would indicate that something fishy was going on.Other reasons for this dialog (high-risk insecure content or different problems with the site's certificate) could also be malicious, so don't click through or enter sensitive information without being aware of what's actually going on.

Contrary to what other authors have written, this does not indicate mixed content. It might indicate incorrectly mixed content, but normally, that would produce a yellow lock and no slash:

enter image description here

about which the support link says:

The site uses SSL, but Google Chrome has detected insecure content on the page. Be careful if you’re entering sensitive information on this page. Insecure content can provide a loophole for someone to change the look of the page.

share|improve this answer

Benoit is correct , a website with an unverified ssl certificate is shown as crossed out in google chrome.
You should be careful when entering data on such websites.
Generally though such sites are harmless.
But any website with an unverified SSL certificate asking sensitive data like credit card number etc should be steered clear of.

share|improve this answer

You must log in to answer this question.

protected by Journeyman Geek Jun 6 '13 at 6:14

Thank you for your interest in this question. Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged .