Easy way to determine what content is not delivered using a secure HTTPS connection?

Question

I have some pages that are sent via HTTPS. Internet Explorer sometimes complains about "This webpage contains content that will not be delivered using a secure HTTPS".

I looked in the html source to confirm all content calls (href, src, etc...) are sent via https. My CSS files use relative paths. But I'm still getting these warnings.

Is there an easy way to track down which items are not sent via HTTPS?

Answer 1

I usually use Firefox + Firebug (the "Net" tab) to find the offending request. You could also use Fiddler for this. (with any browser)

Answer 2

Using following tools could help:

• Firefox's FireBug . opening tab Network shows you connection details to multiple resource
• Fiddler - acts as sniffer allows you explore details of connect.

Answer 3

using firefox - view generated source vs viewing source

there is probably a javascript file that is creating a div/iframe that is insecure