Having your site run on SSL is worthless when you include content over an unsafe connection (HTTP).

Do you need DevOps-experts?

Your development team has a full backlog? No time for infrastructure architecture? Our DevOps team is ready to support you!

• We build reliable cloud solutions with Infrastructure as code
• We are experts in security, Linux and databases
• We support your dev team to perform

Read more Show archive.org snapshot

Here is how to hunt down mixed content with Firefox.

How to enable mixed content alerts

If your Firefox does not warn you about mixed content on pages (mine did not), you can enable it again:

Visit about:config and search for security.warn_viewing_mixed. If it's set to false, set it back to true again.

Seeing which URLs are fetched from unsecured connections

Firefox 16+ will show you mixed content in its "Web Console".
Open it from the "Tools" menu or by pressing Ctrl + Shift + K.

Requests appear in black text. If you are on a secure connection, mixed content from HTTP sites will appear in red.

If there are too many requests in the log, you can use the filter field on the top right and put "http://" in it.