# Problem with https with favicon in onebox
**URL:** https://meta.discourse.org/t/problem-with-https-with-favicon-in-onebox/81035
**Category:** Support
**Created:** [February 20, 2018, 2:40pm UTC](https://meta.discourse.org/t/problem-with-https-with-favicon-in-onebox/81035 "2018-02-20T14:40:53Z")
**Posts on this page:** 20
**Page:** 1
### Author:  [@Vaping\_Community](https://meta.discourse.org/u/Vaping_Community)
#### Post date: [February 20, 2018, 2:40pm UTC](https://meta.discourse.org/t/problem-with-https-with-favicon-in-onebox/81035/1 "2018-02-20T14:40:53Z")
Ok, so I have my site setup with SSL and it works great, images are downloaded from sources to preserve HTTPS but in an **external link onebox** the favicon.ico will not / can not download? And is breaking the https.
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [February 20, 2018, 2:52pm UTC](https://meta.discourse.org/t/problem-with-https-with-favicon-in-onebox/81035/2 "2018-02-20T14:52:23Z")
Did you check in your settings to see if are referring to it as https?
---
### Author:  [@Vaping\_Community](https://meta.discourse.org/u/Vaping_Community)
#### Post date: [February 20, 2018, 3:14pm UTC](https://meta.discourse.org/t/problem-with-https-with-favicon-in-onebox/81035/3 "2018-02-20T15:14:32Z")
Sorry, to be clear, this is a onebox from a different site.
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [February 20, 2018, 3:30pm UTC](https://meta.discourse.org/t/problem-with-https-with-favicon-in-onebox/81035/4 "2018-02-20T15:30:01Z")
Oops! Sorry. It’s not one of my areas of expertise, but I’m guessing that’s a problem that can’t easily be fixed. The only way that I can see would be for Discourse to serve its own copy of those, which it does for most images unless that site setting has been changed.
---
### Author:  [@Vaping\_Community](https://meta.discourse.org/u/Vaping_Community)
#### Post date: [February 20, 2018, 3:41pm UTC](https://meta.discourse.org/t/problem-with-https-with-favicon-in-onebox/81035/5 "2018-02-20T15:41:02Z")
I have the setting set to download images which works great but it can’t work for .ico files?
---
### Author:  [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [February 20, 2018, 4:33pm UTC](https://meta.discourse.org/t/problem-with-https-with-favicon-in-onebox/81035/6 "2018-02-20T16:33:38Z")
If you add `.ico` to `authorized extensions` it works?
---
### Author:  [@Vaping\_Community](https://meta.discourse.org/u/Vaping_Community)
#### Post date: [February 20, 2018, 4:34pm UTC](https://meta.discourse.org/t/problem-with-https-with-favicon-in-onebox/81035/7 "2018-02-20T16:34:00Z")
I’ll try now, thanks for the reply.
Edit: Happy Anniversary @Falco 🎉
---
### Author:  [@Vaping\_Community](https://meta.discourse.org/u/Vaping_Community)
#### Post date: [February 20, 2018, 4:37pm UTC](https://meta.discourse.org/t/problem-with-https-with-favicon-in-onebox/81035/8 "2018-02-20T16:37:33Z")
I’ve added the `.ico` am I right in thinking this will now download the `.ico` and serve it locally?
---
### Author:  [@Vaping\_Community](https://meta.discourse.org/u/Vaping_Community)
#### Post date: [February 20, 2018, 4:59pm UTC](https://meta.discourse.org/t/problem-with-https-with-favicon-in-onebox/81035/9 "2018-02-20T16:59:07Z")
Thankyou it worked 👍
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [February 20, 2018, 5:01pm UTC](https://meta.discourse.org/t/problem-with-https-with-favicon-in-onebox/81035/10 "2018-02-20T17:01:42Z")
> [@Vaping\_Community](#):
>
> Thankyou it worked
So perhaps `.ico` should be added to `authorized_extensions` by default and this is a 🐛?
---
### Author:  [@Vaping\_Community](https://meta.discourse.org/u/Vaping_Community)
#### Post date: [February 20, 2018, 5:02pm UTC](https://meta.discourse.org/t/problem-with-https-with-favicon-in-onebox/81035/11 "2018-02-20T17:02:45Z")
I guess your right, they were introduced into onebox in 1.9 I think
---
### Author:  [@adorfer](https://meta.discourse.org/u/adorfer)
#### Post date: [March 13, 2018, 3:06pm UTC](https://meta.discourse.org/t/problem-with-https-with-favicon-in-onebox/81035/12 "2018-03-13T15:06:38Z")
**EDIT** **it looks like a topic related to Plugin “[TopicListPreview](https://github.com/angusmcleod/discourse-topic-previews)”**
\_\*Discussion: [https://meta.discourse.org/t/topic-list-previews/41630/764\*\_](https://meta.discourse.org/t/topic-list-previews/41630/764*_)
these favicons “from http-only websites” are getting disturbing now with current chrome/firefox.
in other words: $USERS are complaining about _“why is forum inscecure”_
Off course i do explain, what “mixed content” means. But out of 2 which complain (where i do explain) there are probly 10 who do NOT complain, but **just assume (silently) “discourse-forum=insecure”**
and this even happens on the front page of the forum, where there is no onebox visible. (i do not know the background, but the requested URLs are favicons from oneboxes deep down in some threads.)
---
### Author:  [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [March 13, 2018, 7:00pm UTC](https://meta.discourse.org/t/problem-with-https-with-favicon-in-onebox/81035/13 "2018-03-13T19:00:13Z")
Could you verify the above @techapj?
---
### Author:  [@Vaping\_Community](https://meta.discourse.org/u/Vaping_Community)
#### Post date: [March 13, 2018, 7:13pm UTC](https://meta.discourse.org/t/problem-with-https-with-favicon-in-onebox/81035/14 "2018-03-13T19:13:32Z")
The site does show as insecure until the image is downloaded by discourse, not sure if there is a way around it..
---
### Author:  [@adorfer](https://meta.discourse.org/u/adorfer)
#### Post date: [March 13, 2018, 9:19pm UTC](https://meta.discourse.org/t/problem-with-https-with-favicon-in-onebox/81035/15 "2018-03-13T21:19:30Z")
> [@Vaping\_Community](#):
>
> The site does show as insecure until the image is downloaded by discourse, not sure if there is a way around it…
discourse doesn’t seem to download favicons due to size? or “copyright contstraints”?
(I am just speculating.)
---
### Author:  [@Vaping\_Community](https://meta.discourse.org/u/Vaping_Community)
#### Post date: [March 13, 2018, 9:59pm UTC](https://meta.discourse.org/t/problem-with-https-with-favicon-in-onebox/81035/16 "2018-03-13T21:59:46Z")
Add .ico to your allowed extensions and discourse will download them but it does take time to download, it is not instant
---
### Author:  [@adorfer](https://meta.discourse.org/u/adorfer)
#### Post date: [March 14, 2018, 1:58pm UTC](https://meta.discourse.org/t/problem-with-https-with-favicon-in-onebox/81035/17 "2018-03-14T13:58:47Z")
I tried this about 14 hours ago and started a full rebake (which finisched successfully meanwhile)
But no change, even after multiple Reloads:
Any hints?
---
### Author:  [@Vaping\_Community](https://meta.discourse.org/u/Vaping_Community)
#### Post date: [March 14, 2018, 2:18pm UTC](https://meta.discourse.org/t/problem-with-https-with-favicon-in-onebox/81035/18 "2018-03-14T14:18:11Z")
Not until I can get to my laptop…
Btw your header is broken on iPhone SE
---
### Author:  [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [March 14, 2018, 3:05pm UTC](https://meta.discourse.org/t/problem-with-https-with-favicon-in-onebox/81035/19 "2018-03-14T15:05:37Z")
You are using custom plugins.
[Safe Mode](https://meta.discourse.org/t/53504?silent=true) Discourse gets the green padlock: [Freifunk Forum](https://forum.freifunk.net/?safe_mode=no_custom%2Cno_plugins%2Conly_official)
---
### Author:  [@adorfer](https://meta.discourse.org/u/adorfer)
#### Post date: [March 14, 2018, 3:36pm UTC](https://meta.discourse.org/t/problem-with-https-with-favicon-in-onebox/81035/20 "2018-03-14T15:36:56Z")
> [@Falco](#):
>
> You are using custom plugins.
You nailed it. thank you.
as edited above:
It looks like a topic related to Plugin “[TopicListPreview](https://github.com/angusmcleod/discourse-topic-previews)”
Can you move it perhaps to [https://meta.discourse.org/t/topic-list-previews/41630/764](https://meta.discourse.org/t/topic-list-previews/41630/764)
(because my issue is NOT related to onebox)
[Next page](https://meta.discourse.org/t/problem-with-https-with-favicon-in-onebox/81035.md?page=2)