Builder brands: Unsecured content

So, your website is live, it's got a free SSL, but still seeing a "not secure" warning; what gives??

In this article, we will discuss why a secure website might still display this warning, as well as what you can do to try to secure all of the content of your pages.

First, does an SSL-encyrpted site encrypt its content?

It might seem natural that if you use an SSL certificate, your website content will be secure; however, this isn't the case. Although Secure Sockets Layer encrypts traffic between your content and various computers, you may still have content that can't be encrypted, such as iframes.

Since iframes and similar content are technically not located on your website, customers may still see messages that the page they're viewing contains unsecured content, especially if there are images or other elements that aren't encrypted at their host.

What can you do?

Though these warnings do not mean that a failure of your SSL certificate has occurred, they can still be worrisome to viewers and impact your site's conversions negatively. If an image, video, or URL points to an unsecured file hosted on a third-party server outside your website, you'll need to use a different URL or modify the image link to use the secure https protocol.

In some cases, the content must also be "secured" at the host for this to work. You should reach out to the content originator to obtain a secure version of the content or recommend that they offer such a thing.

If you have double-checked and confirmed that your site has no iframes or unsecured content but your SSL is not active, you can unassign the site currently attached to the domain, then reassign the site again to reset the SSL provision. For instructions on how to do this, check out our article: Change assigned website on domain.