If using SSL, then the login-bg.gif URL should be https

[docwhat]

When using SSL on a page and you get the 'Identity URL:' request, the login-bg.gif is gotten from an HTTP (not HTTPS) URL. This causes a warning in most browsers.

It should use the url https://openid.net/images/login-bg.gif instead of http://openid.net/images/login-bg.gif if SSL is detected.

At the least, it could use the URL //openid.net/images/login-bg.gif which will automatically pick up the protocol when hitting openid.net.