Mixed content warnings

[kristjan]

• Load the avatar image securely
• ...

Add 'em as you find 'em

[mdz]

cf. #844

[amcjen]

Hmm, I'm at an impasse on what to do about the mixed-content warnings. Instagram doesn't let you add https without an "untrusted cert" popup (even worse than mixed-content IMO), and worse, in researching this I came across this post:

http://groups.google.com/group/instagram-api-developers/browse_thread/thread/96c3a7bff8187eff

Which sounds like we may not be able to display Instagram photos at all in our iframe soon.

Time to write up a story around proxying all this data through us?

[amcjen]

n/m, looks like we already have proxying, working on that