Interesting... obviously the stuff coming from Facebook is not secure.

But I never worried about it because it's only there on the home page, which should be http. I even altered the login redirect to go to the "My Account" page instead of the home page.

The strange thing is that yesterday, the warning was coming on pages that didn't have the Facebook fan box (like the log in and check out pages), and only in Google Chrome. Today Google Chrome is fine.

But I still like the advice and will make sure the fan box doesn't load on https. Thanks for the code