# SSL weirdness

**URL:** <https://forum.kirupa.com/t/ssl-weirdness/254168>\
**Category:** Uncategorized\
**Created:** [March 9, 2008, 12:19am UTC](https://forum.kirupa.com/t/ssl-weirdness/254168 "2008-03-09T00:19:39Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![ya3](https://avatars.discourse-cdn.com/v4/letter/y/e95f7d/32.png) [@ya3](https://forum.kirupa.com/u/ya3)\
**Post date:** [March 9, 2008, 12:19am UTC](https://forum.kirupa.com/t/ssl-weirdness/254168/1 "2008-03-09T00:19:39Z")

</div>

So I’ve made this online store. [http://tinyurl.com/36g5cd](http://tinyurl.com/36g5cd).

Got an SSL certificate for it and all, but during checkout Firefox reports it as being only ‘partially encrypted’ (crossed-out padlock symbol).

I think it’s because I’ve got a whole bunch of Session variables hanging around (for things like Currency selection, last page viewed, etc) but the actual sensitive details are all POST’ed to the secure area.

What am I doing wrong?