I'm aware that I can bypass the browser's security warnings, but the point is that "HTTPS Connection" isn't actually using HTTPS fully and that clicking "Load unsafe script" is just a temporary workaround.
Even when using SSL, browser is asked to load non-SSL content.
I've enabled HTTPS, exited Airdroid, opened it again.. and whilst the HTTPS setting occasionally sticks (and the push service still keeps turning itself back on), there's still the question of the unencrypted websocket on port 8889.
[blocked] The page at 'https://LANIP:8890/' was loaded over HTTPS, but ran insecure content from 'ws://LANIP:8889/HEXDIGITS': this content should also be loaded over HTTPS.
resource_2.js:7
Uncaught SecurityError: Failed to construct 'WebSocket': An insecure WebSocket connection may not be initiated from a page loaded over HTTPS. resource_2.js:7
[/quote]
[blocked] The page at 'https://LANIP:8890/' was loaded over HTTPS, but ran insecure content from 'ws://LANIP:8889/HEXDIGITS': this content should also be loaded over HTTPS.
resource_2.js:7
Uncaught SecurityError: Failed to construct 'WebSocket': An insecure WebSocket connection may not be initiated from a page loaded over HTTPS. resource_2.js:7
[/quote]