fallenmystic
Tribune
Hyperlinks don't matter whether or not they use HTTPS. Images are, however, a different story and I can only guess as I don't use Cloudflare myself.So images inserted into posts that are hosted on non https sites would have the same effect?
But hyperlinks to such sites (which are bigger worry really, some may be seriously dodgy) presumably wouldn't?
If you post an image using a non-HTTPS URL, it will trigger such a warning in most of the browsers. However, there is a neat feature in Cloudflare (which I mentioned in my previous post) that will automatically rewrites such URLs to use HTTPS instead.
The problem is, it will only work if the host in question actually supports HTTPS, like CF does. I just searched and read their documentation and now I became a bit less enthusiastic about it as it reads as follows:
In other words, it will only work if the domain in question is registered in such lists which may not be the case with URLs our members use.To determine which URLs do not have HTTPS support, Cloudflare uses data from EFF’s HTTPS Everywhere and Chrome’s HSTS preload list.
I think I have a plan to fix this problem without requiring the users to change their URLs. However, it involves tweaking XenForo settings and spending 2$/month, so I'll at least wait until we get the next month's bill and hopefully find that the CDN actually has reduced the cost enough to justify the additional hassle before I suggest the method.