The Site Identity Button is a feature in Firefox that gives users more information about the sites they visit.
Depending on the configuration of your website, this button may display a number of different icons.
If the Site Identity Button on your site shows something you do not expect (for example, an orange warning triangle when you expect a green padlock) you can find out the cause of the problem by looking in the Web Console in the Firefox Developer Tools:
- Ensure your web console is displaying messages in the 'security' category
- Force-refresh the page on your site that is causing problems
- Watch for any security messages that may appear
A downgraded security UI will be due to one of these three problems:
- Mixed content - while your page has been served over TLS, but subresources loaded for your page have not. In this case, expect to see a 'mixed content' message in the web console.
- Use of a weak cipher - in this case, you're using TLS but a strong cipher was not available. Look for messages about weak ciphers (e.g. RC4).
- Insecure renegotation - older versions of TLS had a flaw in the basic design; if your server uses an affected version, the security UI will be downgraded but no web console message will be displayed.