Ever since this Word­Press net­work launched, users may have got­ten mixed con­tent warn­ings when using HTTPS (Hyper­text Trans­fer Pro­to­col Secure) to access site pages and admin pages.

These warn­ings have mes­sages like “This page has inse­cure con­tent” and con­fus­ing but­tons like “Don’t load (rec­om­mended),” “Load any­way,” or “Aren’t you sure you don’t want to not dis­play the non­se­cure items?”

Thanks to a plu­gin called “Word­Press HTTPS” and a few extra con­fig­u­ra­tion lines added to our reverse proxy servers and Word­Press con­fig files, these mixed con­tent warn­ings should be gone for good. Also the in-browser icons that indi­cate a properly-loaded HTTPS page should now appear instead of the bro­ken lock or miss­ing icons.

We are now auto­mat­i­cally redi­rect­ing all admin pages (/wp-admin) on all net­work sites to HTTPS, includ­ing the login screen.

Another ben­e­fit of the Word­Press HTTPS plu­gin is that it adds an abil­ity for con­tent authors to force a page or post to be secure via an option on the “Add New” screen.