I’m hoping this is just a bug on Facebook’s end that will be fixed soon, but in my Facebook Connect app I’m launching the dialogue FB provides to make a post. This dialogue is launched on a page with an SSL connection. In this dialogue the profile pic for some users comes up with a security warning while others display correctly. I’m already setup to use Facebook’s SSL javascript file instead of the HTTP file.
Share
This is a bug at Facebook, but there’s a work-around. When you use Facebook Connect to show a profile pic, you must set facebook-logo=”false” on the fb:profile-pic FBML tag. (Note: the default is “true”). If you do this, and follow the instructions at facebook for using ssl, then the profile pic will be served using the correct protocol. If you leave it set to “true”, then you always get the profile pics over http.
The bug is reported at http://bugs.developers.facebook.com/ as issue 5507 and possibly 7072 and 8485.