Security Warnings on Marketo Landing Pages

[Denise_Greenb10]

We are seeing security warnings for all of our landing pages when using Firefox - but not, with one exception, when using Chrome. Can anyone offer suggestions about what might be going on?

Note that:

1) We have Marketo's SSL package installed

2) We have combed through our LPs and LP templates and changed any references to "http://" to "https://"

Here's an example of an LP that shows warnings in Firefox but not Chrome:

https://go.netsertive.com/CLONETHISTEMPLATEYYYY-MM-DDWebinarNameofWebinar_RegLP.html

Here's an LP that shows warnings in both browsers:

(on this one I thought it might be the embedded Wistia video but when I  remove it it makes no difference)

https://go.netsertive.com/CLONETHISTEMPLATEYYYY-MM-DDWebinarNameofWebinar_TYLP.html

Thanks in advance for any ideas!

[SanfordWhiteman]

It's because of this: https://blog.teknkl.com/flop-timized-marketo-lps-and-the-case-of-the-350kb-favicon/

[Denise_Greenb10]

Hi Sandy,

Thank you! I just skimmed your blog post. The thing is, this client doesn't use favicons on their LP's - and I just searched the LP template code for "favicon" and it wasn't there. Am I missing something because I only skimmed your post (apologies in advance if so!)?

Oh... wait, I DO see the favicon reference if I view source on the live LP.  But where is it coming from if it's not in the template? How to I get at it?

Denise

[SanfordWhiteman]

The browser automatically looks for it at the root. So it needs to be there, or the redirect to http:// can't be stopped.

[SanfordWhiteman]

Oh, and also Marketo inserts the tag automatically unless you uncheck it in Landing Pages.

[Denise_Greenb10]

Hi Sanford,

Where do you uncheck it in the LP? I don't see the tag.

Thank!

Denise

[SanfordWhiteman]

In Admin >> Landing Pages.

[Denise_Greenb10]

I don't see anything about favicons there either:

[Steven_Vanderb3]

You should update the references to your fallback page and homepage to https as well.

[Denise_Greenb10]

Hi @Steven_Vanderb3 - Update the references where? Thanks!

[Denise_Greenb10]

@Steven_Vanderb3- I see. Thank you!

[Denise_Greenb10]

@SanfordWhiteman, @Steven_Vanderb3   -

I implemented the redirect and I updated the fallback and home pages to https.

I'm still getting the security warnings on the LP's in Firefox - without exception. And with one of them - this one - I get warnings in both Firefox and Chrome:

https://go.netsertive.com/2020-3-26WebinarAutoMarketingDuringCOVID-19_TYLP.html

Any other ideas?

[SanfordWhiteman]

Scroll down.

[Denise_Greenb10]

Re: "scroll down" - well don't I feel silly! Thanks!

Now that I unchecked it - do I have to re-create the Landing Pages to get rid of the tags?

[SanfordWhiteman]

Should take effect automatically, no need to even reapprove. But you can test!

[Denise_Greenb10]

Of course, I tested it! That's why I asked the question. The security warnings are still there and I still see favicon references in the source code in the live page. And when I created an LP from scratch - with not edits - just the plain template - the security warnings are there, too, and so are favicon references in the source code.

Page existed before I checked the box:

https://go.netsertive.com/Test-Webinar_Reg-LP.html

New page created after:

https://go.netsertive.com/Test-Webinar_SecurityTestLP.html

[SanfordWhiteman]

Yeah, you still need the redirect rule as in my blog post.

[Denise_Greenb10]

So just to be sure I'm understanding your blog post correctly. In this case that would mean creating a redirect:

from:

"https://go.netsertive.com/rs/479-FPP-504/images/favicon.ico " [which I have confirmed does not exist - it's just Marketo making it up, as you said]

to:

"https://www.netsertive.com/favicon.ico "

Is that correct?

Thank you!

[SanfordWhiteman]

Yes, do that!

[Denise_Greenb10]

I still don't see any checkbox but are you saying the fix is to create this redirect?

from:

"https://go.netsertive.com/rs/479-FPP-504/images/favicon.ico "

to:

"https://www.netsertive.com/favicon.ico "