Sorry if I come across as harsh, but these security "problems" caused by certain browsers (or in the case of the other dozens threads in the recent past - Antivirus suite false detects) frustrate me.
Yes, there are minor problems in a lot of eBay pages that don't pass mustard in an ideal laboratory environment, but they are not a major concern in the context of mundane activities like sending an invoice or looking at a help page, and they don't mean "eBay has been hacked" as seems to be the inevitable reaction of many who run into them. Yes there are exploits possible due to a single non-HTTPS file loading on a secure page, but they require a man in the middle attack and an attacker that can be bothered to go to the effort.
A hacker sitting in Starbucks intercepting your WiFi traffic to eBay trying to spoof an insecure script file is possible but very. very unlikely as it would need to be extremely targeted to a specific eBay file. Man in the middle inside your ISP doing the same? You have bigger problems then. Malware on your computer that can exploit obscure HTTP/HTTPS vulnerabilities? Again, you have bigger problems. And LOGJAM, POODLE, FREAK, etc attacks are not lurking in every nook and cranny of the web (again, man in the middle, and would likely be highly targeted)
If you come across a security issue while logging into eBay, PayPal, or any other site, that is possibly a real concern.
Let's tag eBay and report what you have observed:
tyler@ebayobsidion2 has reported an issue with eBay invoice page using Edge and Chrome. I see a partial encryption issue due to the image file I mentioned above, but no security cert issues using Firefox 52 (but I am by no means anything other than a novice when it comes to SSL certs and FF52 doesn't go as nuts over those issues as new versions). That HTTP link needs to be fixed, and maybe someone conversant in security certs should look into any potential certificate issues.
