# Problem with https with favicon in onebox

**URL:** https://meta.discourse.org/t/problem-with-https-with-favicon-in-onebox/81035
**Category:** Support
**Created:** [February 20, 2018, 2:40pm UTC](https://meta.discourse.org/t/problem-with-https-with-favicon-in-onebox/81035 "2018-02-20T14:40:53Z")
**Posts on this page:** 1
**Showing post:** 12

<div class="post-metadata">

### Author: ![adorfer](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/adorfer/32/82089_2.png) [@adorfer](https://meta.discourse.org/u/adorfer)
#### Post date: [March 13, 2018, 3:06pm UTC](https://meta.discourse.org/t/problem-with-https-with-favicon-in-onebox/81035/12 "2018-03-13T15:06:38Z")

</div>

**EDIT** **it looks like a topic related to Plugin “[TopicListPreview](https://github.com/angusmcleod/discourse-topic-previews)”**

\_\*Discussion: [https://meta.discourse.org/t/topic-list-previews/41630/764\*\_](https://meta.discourse.org/t/topic-list-previews/41630/764*_)

these favicons “from http-only websites” are getting disturbing now with current chrome/firefox.

in other words: $USERS are complaining about _“why is forum inscecure”_  
Off course i do explain, what “mixed content” means. But out of 2 which complain (where i do explain) there are probly 10 who do NOT complain, but **just assume (silently) “discourse-forum=insecure”**

and this even happens on the front page of the forum, where there is no onebox visible. (i do not know the background, but the requested URLs are favicons from oneboxes deep down in some threads.)

---

_[View the full topic](https://meta.discourse.org/t/problem-with-https-with-favicon-in-onebox/81035)._