XenForo with SSL (https)

SSL isn't broken because of images, the worst an attacker can do is show a different image as someones avatar, the security isn't compromised in any way.
 
The user doesn't know if it's only the image that does it and it is shown as broken since it pulls information from a non-ssl source.
 
Back
Top