Twitter avatars not synced vía HTTPS?

[Setsumi]

I've moved my community to an HTTPS domain with a Cloudflare certificate.

Now, when browsing any area of the community where users use avatars with this:

(Sync with Twitter)

It serves the avatar from http://pbs.twimg.com/ instead of https://pbs.twimg.com/. This causes the page to be flagged as "Insecure", even when the image is not seen anywhere else than a hovercard code.

Is there any way to change this?

[Simon Woods]

I think it should just work. I have had concerns about this kind of thing and brought it up here: 

Assuming that all parts of the social account sync are covered in the same way as sign-in then I'd say your problem is a bug of some kind.

[marklcfc]

I had noticed twitter avatars haven't been showing for a while, probably since I switched to https

This is one users for example https://pbs.twimg.com/profile_images/768134813949825029/Na3z7sL8_normal.jpg

If they change twitter avatar does it only update on the forum next time they visit the forum?