# Links to Amazon cause a TLS mixed content warning

**URL:** <https://meta.discourse.org/t/links-to-amazon-cause-a-tls-mixed-content-warning/37743>\
**Category:** Bug\
**Created:** [2016 年 1 月 11 日午後 2:22 UTC](https://meta.discourse.org/t/links-to-amazon-cause-a-tls-mixed-content-warning/37743 "2016-01-11T14:22:47Z")\
**Posts on this page:** 1\
**Showing post:** 5

<div class="post-metadata">

**Author:** ![wesochuck](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/wesochuck/32/108706_2.png) [@wesochuck](https://meta.discourse.org/u/wesochuck)\
**Post date:** [2016 年 1 月 11 日午後 4:06 UTC](https://meta.discourse.org/t/links-to-amazon-cause-a-tls-mixed-content-warning/37743/5 "2016-01-11T16:06:55Z")

</div>

Ahh, this is a oneboxing issue then and I don’t think there is an easy fix.

For example if you go to: [The Art of Computer Programming, Volumes 1-4A Boxed Set: 9780321751041: Computer Science Books @ Amazon.com](https://www.amazon.com/gp/product/0321751043?amp%3Bkeywords=art%20of%20programming&amp%3Bqid=1452526990&amp%3Bsr=8-1&ref_=sr_1_1)

You’ll notice that it redirects to you HTTP, so I would say that site-wide HTTPS is not possible with Amazon at the moment. Which means the oneboxing code wouldn’t be able to pull in the HTTPS data from Amazon when your page loads.

One work-around is to use the method here:

[https://meta.discourse.org/t/dont-load-http-images-when-using-https/27530/4](https://meta.discourse.org/t/dont-load-http-images-when-using-https/27530/4)

That thread references a feature request to store the images locally instead of pulling them “in real time” from the oneboxed site:

[https://meta.discourse.org/t/download-images-for-oneboxes-as-well-if-download-images-is-set/21103?u=gerhard](https://meta.discourse.org/t/download-images-for-oneboxes-as-well-if-download-images-is-set/21103)

---

_[View the full topic](https://meta.discourse.org/t/links-to-amazon-cause-a-tls-mixed-content-warning/37743)._