Question

I have a secured page running and Chrome is showing me a red padlock instead of a green one, saying that there are insecure elements on the page.

I have pored over the source code, been through every tab and every item in WebKit Inspector – and I cannot find a single reference to http://.

Are there any WebKit Inspector tools/Chrome Extensions/easy ways to find out which elements are insuecure? Or do you have any advice as to which elements could likely be causing the problem?

I have found this extension https://chrome.google.com/webstore/detail/hfoeodccbohfpgkldfcdknmlbbgmdcle which draws a green or red box around secure/insecure elements – but it’s fairly poorly executed and makes it impossible to see what’s insecure, as I can’t find any elements like that.

Thanks!

Update: bizarrely when I load the same page in an Incognito window I start getting the green padlock. I went back to the original window and tried disabling every Chrome extension then reloading, but that didn’t make any difference. I think it might just be a bit of a Chrome hiccup…

Answer 1

Once you visit a single insecure page in a Chrome session, any subsequent pages you visit on the same domain will also be marked as insecure. Your issue is most likely from an earlier page view on the same domain.