By David Jakob on Tuesday, 30 May 2017
Posted in Technical Issues
Replies 8
Likes 0
Views 0.9K
Votes 0
Hi
I am getting errors because I'm using an https site and the cdn site is http.:


http://www.stumbleupon.com/:1 Mixed Content: The page at 'https://strangebeliefs.com/blog' was loaded over HTTPS, but requested an insecure script 'http://cdn.stumble-upon.com/js/badge_su.js?v=20120613'. This request has been blocked; the content must be served over HTTPS.
http://www.stumbleupon.com/:1 Mixed Content: The page at 'https://strangebeliefs.com/blog' was loaded over HTTPS, but requested an insecure stylesheet 'http://cdn.stumble-upon.com/css/badges_su.css?v=20120613'. This request has been blocked; the content must be served over HTTPS.
content_script.js:125 should throw exception - 3
article Failed to load resource: the server responded with a status of 404 ()
http://www.stumbleupon.com/:1 Mixed Content: The page at 'https://strangebeliefs.com/blog' was loaded over HTTPS, but requested an insecure stylesheet 'http://cdn.stumble-upon.com/css/badges_su.css?v=20120613'. This request has been blocked; the content must be served over HTTPS.


Can you change that?
Regards
David
Here's the problem David, StumbleUpon doesn't have a https for their assets. We actually use the code that was provided from https://www.stumbleupon.com/dt/badges/create and upon testing this, their code always renders their assets files from http instead of https
·
Wednesday, 31 May 2017 01:17
·
0 Likes
·
0 Votes
·
0 Comments
·
Thanks for the info. That doesn't help. Sites, as you know, rank better when using https.
I would have thought you'd be pushing stumbleupon to acknowledge that.

It makes your component look bad! Does that make you happy? I assume not and would have expected you take a more rigurous approach to your CDN network supplier. Amazon does this better!
Regards
David
·
Wednesday, 31 May 2017 02:18
·
0 Likes
·
0 Votes
·
0 Comments
·
You're welcome David, we would love to help but unfortunately this stumbleupon not developed by us

Please take note these following script and stylesheet was actually loaded by stumbleupon server :

http://cdn.stumble-upon.com/js/badge_su.js?v=20120613
http://cdn.stumble-upon.com/css/badges_su.css?v=20120613


You can take a look of their support center forum thread here : https://getsatisfaction.com/stumbleupon_help_center/topics/badge_widget_https_mixed_content_problem

They already mentioned currently do not have support https site with their stumblespon badge/widget, perhaps you can start a new thread on their forums and ask after 3 years ago is it already can compatible with https site now?
·
Wednesday, 31 May 2017 10:21
·
0 Likes
·
0 Votes
·
0 Comments
·
Hi Arlex

I'm afraid I disagree: I pay you for an excellent component and you use a delivery system which is not of the quality which your component deserves.
Passing this problem on to your customers is not a solution.
StumbleUpon is your supplier.If they don't deliver what you need, change your supplier.
That's how I look on it as a lecturer at MBA level in Marketing and your customer. What I want to hear, is that you will sort that out on behalf of all your customers.

Regards
David
·
Thursday, 01 June 2017 02:27
·
0 Likes
·
0 Votes
·
0 Comments
·
Thanks for getting back to us, I'm afraid that you are misunderstand as what my explanation at my previous response, we totally understand that, but we were not pass the problem to you, what i did was i would like to clarify these CDN script is not something we would like to load on the page, this is stumbleupon API requirement have to load this script in order to populate the social button on the page, but unfortunately stumbleupon social button script couldn't support SSL.

StumbleUpon is your supplier.If they don't deliver what you need, change your supplier.

In my suggestion, you can turn it off this stumbleupon social button from backend > Easyblog > settings > social integration > Stumble Upon Button - NO, you can refer on my attached screenshot below where is the setting located.

Once you turn if off, it will no longer to load that CDN stumbleupon script on the page.
·
Thursday, 01 June 2017 12:30
·
0 Likes
·
0 Votes
·
0 Comments
·
Hi Arlex

You are correct: I misunderstood you.
I've turned of the social settings and it had the effect you described.
I guess I have to look for a replacement for that. Any ideas?

Regards
David
·
Thursday, 01 June 2017 15:24
·
0 Likes
·
0 Votes
·
0 Comments
·
Hello David,

Do you use Stumbleupon? If you don't you could just disable the integrations with Stumble Upon. Please understand that Stumble Upon is not our provider and it is in no way affiliated with us and neither are we affiliated with them.

Think of Stumble Upon like Pinterest. All we do is to enable their buttons to appear on your site if you want If they do not want to host a https version of their assets files, there is really nothing we could do

You can learn more about Stumble Upon at http://stumbleupon.com/
·
Thursday, 01 June 2017 23:18
·
0 Likes
·
0 Votes
·
0 Comments
·
View Full Post