Load https://marketplace.firefox.com/developers/ in Firefox stable (34.0.5 and also reproduced in 33.1) and notice there is a caution sign where the green lock should be in the awesome bar. I didn't see any Mixed Content errors in the console. I also checked via these two services: https://www.jitbit.com/sslcheck/#url=https://marketplace.firefox.com/developers/ https://www.whynopadlock.com/check.php –– Screenshot of https://marketplace.firefox.com/developers/ in Firefox (valid): https://www.dropbox.com/s/kts9tw9717k7v18/Screenshot%202014-12-17%2010.24.45.png?dl=0 Screenshot of Page Info of https://marketplace.firefox.com/developers/ in Firefox (invalid): https://www.dropbox.com/s/gdk3vegbnj7go23/Screenshot%202014-12-17%2010.24.58.png?dl=0 Compare to screenshot of https://marketplace-dev.allizom.org/ in Firefox (valid): https://www.dropbox.com/s/wehp7cc6wnz7kax/Screenshot%202014-12-17%2010.25.45.png?dl=0 Compare to screenshot of https://marketplace-dev.allizom.org/developers/ in Firefox (valid): https://www.dropbox.com/s/h8ymjl1ovs6sm3a/Screenshot%202014-12-17%2010.25.32.png?dl=0 Screenshot of https://marketplace.firefox.com/developers/ in Chrome (valid): https://www.dropbox.com/s/o97i9v7a5rzp327/Screenshot%202014-12-17%2010.27.44.png?dl=0

> Screenshot of https://marketplace.firefox.com/developers/ in Firefox (valid): "valid" should be "invalid"

I can't repro this.

I cannot reproduce this issue. https://www.dropbox.com/s/cjazt3wlbj01xj4/Screenshot%202014-12-18%2015.23.32.png?dl=0

(In reply to krupa raj[:krupa] from comment #3) > I cannot reproduce this issue. > https://www.dropbox.com/s/cjazt3wlbj01xj4/Screenshot%202014-12-18%2015.23.32. > png?dl=0 1. Load https://marketplace.firefox.com/developers/. 2. Then click the URL bar so it's focussed and press enter. 3. You should see the green SSL "Mozilla Foundation (US)" box flicker as it disappears and gets replaced with the gray caution sign icon. Let me know if you still can't reproduce. Am interested in getting more people testing. Wonder what's causing it. Might be able to rope in some TLS experts.

I can reproduce with STR from comment 4 (and couldn't before) on Fx 34 Linux. Once I have reproduced it once, reloading still shows the grey warning. Like in comment 0, Page Info says that my connection is only partially encrypted... but I don't see any non-https request going out :(

I talked to Gavin about this, and it turns out there are quite a few bugs in this same area. Some bugs: https://bugzilla.mozilla.org/buglist.cgi?quicksearch=511369%2C947079%2C997873%2C1072421&list_id=11747238 I think this is a dupe of bug 947079 so I'm going to dupe it, but I'm also going to CC tanvi who is a subject expert and is welcome to correct me. :)

Yes, probably the same issue. Bug 947079 is fixed but we are waiting on a dependency before we can land it and fix this issue.