11

Safari hides the http: or https:, so how can I tell if I'm viewing a page over SSL? Some pages show issuer information in the URL bar, but not all of them. So the ones that show issuer info are secure, but I'd rather not have to reload the other pages in Chrome just to determine whether I have a secure connection to it.

Improve this question
5
  • 6
    You can also see the full URL by pressing ⌘LCV.
    – Lri
    Commented Dec 31, 2012 at 15:47
  • Excellent question. And concerning everyone and other web browser like Firefox. Hence I added a security tag to this question.
    – athena
    Commented Jan 31, 2013 at 19:01
  • 1
    This http versus https indication in raw was one of the unique trustable indicator for a normal user. All the other tricks can't be trusted since they basically "hide" the truth.
    – athena
    Commented Jan 31, 2013 at 19:06
  • For excellent reasons, Apple decided to bring back this textual security information. This is a very good point since this text field can't easily be messed up. This text field is the simplest and strongest validation that a connection is actually http versus https.
    – athena
    Commented Jul 18, 2013 at 6:51
  • Firefox doesn't yet receive enough user feedback to see the path ☹.
    – athena
    Commented Jul 18, 2013 at 6:59

7 Answers 7

Reset to default
3

On safari open Inspector->Resource Tab-> on right hand panel you can see Scheme: will be HTTPS if https or HTTP if secure.

enter image description here

Improve this answer
12

On HTTPS pages Safari shows a small padlock.

enter image description here (screen made with Safari 6.0.2)

You can see this a little easier in these larger snaps - one of a site where the SSL certificate was not trusted implicitly (signed or otherwise trusted by your Mac) and another where the certificate was valid and signed up the chain by the Mac and shown in green.

Unknown SSL certificate in Safari Good SSL certificate in Safari

Improve this answer
3
  • 2
    It seems to me like not all https pages show that. I'll try to find a specific example site.
    – Greg
    Commented Dec 31, 2012 at 18:58
  • The problem with blanket statements about https is that there is no standard for what part of a page should/must/is sent encrypted and which is not. This might make an interesting follow on question as to why one site shows secure on when another is off and where safari currently draws the line on showing a badge in the address bar.
    – bmike ♦
    Commented Dec 31, 2012 at 20:53
  • the padlock does not show up on bundio.com, for example. This site has the standard ssl certificate from go daddy. The different flavors of ssl may show differently on safari. ⌘LCV shows the entire url with https.
    – Danny
    Commented Aug 7, 2013 at 22:53
5

Some pages will display the lock icon during loading, then it will disappear. This is because there is some insecure content on the page, for example Google AdSense ads on a secure page can cause this.

Improve this answer
3

As a follow up to the answer by @chrisg I recently noticed that some Safari Extensions will also hide the lock icon, presumably because they send or receive information over http. So if you are having problems when no site will show the padlock, lock through your Extensions...

(I know this question is a bit old, but I thought this might be valuable information)

Improve this answer
1

In response to Matthieu post, the https or EV Disclosure is only visible when the page initially loads, once finished it hides it again which is really annoying. The only way to show it i've found so far is Lauri answer by pressing ⌘LCV which is nuts. If im paying for an EV I want my customers to see it!

Improve this answer
1
  • 3
    Please post an example of this behavior. When I visit the Safari Developer Library, the HTTPS icon in the address bar does not disappear after the page loads.
    – Tyler Mumford
    Commented Feb 2, 2013 at 20:57
0

Addendum to @Fredrik -- the lack of an encryption button (padlock icon) on a site accessed using HTTPS may indicate that one or more extensions are out of date (check Safari->Preferences->Extensions).

Improve this answer
-1

Or, just tap the address bar and the whole address is shown. Including the https:

Improve this answer
1
  • This is referring to Safari in iOS, whereas the question was specifically about Safari in OS X. Clicking (tapping) the address bar in OS X does not show the whole address.
    – grg ♦
    Commented Aug 25, 2013 at 11:20

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .