Https breach browser notice: unsecured gravatar
Created by: Mikulas
All Gitlab resources are loaded over https but gravatar. It would be great if it actually used https://secure.gravatar.com/ instead of the http version.
It's no biggie, but it makes users less comfortable when the ssl icon is gray instead of green. And it's very very minor security issue (the attacker can show another avatar, hmmm).