I recently put my website under SSL. I’ve been able to adapt the website so that most of the content is under SSL, but some data, like Twitter avatars, are on an http website, so I’m receiving warnings, at least in Chrome.
Is there a policy in IIS to enable fetching non-ssl data from pages outside website’s domain?
Is it depending on browser, on the source code, or on server settings?
If you insert direct HTTP links, the browser will complain (and this is correct). One of the options is to cache the data on your server and send it as “own” links for the server.