The rules are:
- If
login_required, everything is marked secure except for public things like site logos, emoji etc. - If it is not, then only uploads in PMs or secure categories are marked secure
I would need to see some examples of this, is it possible that the image URL has just been copied from another post into a new one? I haven’t seen this behaviour before of something getting a secure URL without the underlying upload being secure.