cloud-native-nordics / meetups

Repository to gather all presentations from all Nordic Cloud Native meetups
https://cloudnativenordics.com
MIT License
45 stars 29 forks source link

HTTPS is broken when loading speaker providers #138

Open Crevil opened 4 years ago

Crevil commented 4 years ago

The site is served over HTTPS but if the webpage tries to load a resource from a non-HTTP destination, the entire site is marked as insecure as we can no longer trust the contents served.

Here is an example of such a request. This is from https://cloudnativenordics.com/meetup-groups/Cloud-Native-Aarhus when you scroll past MHI Vestas Offshore Wind in the Speaker providers section.

image

The source of the non-HTTPS resource is here: https://github.com/cloud-native-nordics/meetups/blob/f0a53cc4655f23a64ce5e7dddaa304c79180431b/companies.yaml#L439-L442

I would have provided a PR with the HTTPS scheme, but MHI Vestas does not serve the contents over HTTPS.

Steiniche commented 4 years ago

Thanks for reporting this. It seems like we have to choose either to show no logo or have a page which is "insucure". Right now I believe the best solution is to remove the logo until we can find one at a secure location.