In ssl secured sites the request to use http://googleapi breaks the ssl notification.
You can always load the https instead.

Comments

tsi’s picture

tsi CreditAttribution: tsi commented

If you're not using the font-face feature there shouldn't be a call to google APIs

erutan’s picture

erutan CreditAttribution: erutan commented

I think he's referring to line 121 in template.php that calls http instead of https

tsi’s picture

tsi CreditAttribution: tsi commented
Status: Active » Postponed (maintainer needs more info)

Should I simply replace it with https ? is there a price, e.g. performance hit ?

erutan’s picture

erutan CreditAttribution: erutan commented

http://torbit.com/blog/2011/01/11/google-libraries-api-and-ssl-performance/

Anecdotal, but that's a significant hit. Perhaps down the road some kind of toggle button / comment settings to switch between http and https?

erutan’s picture

erutan CreditAttribution: erutan commented

An @font-face drupal module went https:
http://drupal.org/node/920110

It looks like google is promoting using https by default:
https://developers.google.com/webfonts/docs/webfont_loader

tsi’s picture

tsi CreditAttribution: tsi commented

Where do you get that impression ? seems to me they check for https vs http :
wf.src = ('https:' == document.location.protocol ? 'https' : 'http') +...
but thanks for the refference to that page.

tsi’s picture

tsi CreditAttribution: tsi commented
Status: Postponed (maintainer needs more info) » Fixed

Done
http://drupal.org/commitlog/commit/31168/9b60dd60c6c424f1c5fd157db02c48c...

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.