WordPress.org redirects to the http:// version of Gravatar, rather than https://

[carike]

How to replicate:
Hover over your profile picture in the top right corner of the toolbar on make.wordpress.org/core (or other). A preview with a link to your Gravatar profile will appear.
If you click on "View on Gravatar", you will be redirected to an ​http:// version of your profile.

Desired behaviour:
This should redirect to ​https:// instead.

[Otto42]

That comes from hovercards, I think, which is in Jetpack.

[dd32]

I can't trigger the gravatar hovercards myself, and I know they're disabled in a lot of places, but I've checked and this isn't coming from the dotorg site, it's most likely present in the Gravatar JS: ​https://secure.gravatar.com/js/gprofiles.js?ver=202116:formatted

[dd32]

Just confirming, this is within the Gravatar JS and only they can change this. I'll mention it to the team.

[naxoc]

FWIW: It's been fixed now in the Gravatar JS.