gitlabhq/gitlabhq — Issue #356: Https breach browser notice: unsecured gravatar
Author: Mikulas
Created: 2012-01-30 23:12:32+00:00
State: open

All Gitlab resources are loaded over https but gravatar. It would be great if it actually used ```https://secure.gravatar.com/``` instead of the http version.

It's no biggie, but it makes users less comfortable when the ssl icon is gray instead of green. And it's very very minor security issue (the attacker can show another avatar, hmmm).