Hey Jake,
I’m not sure how others do it, but what’s going on is it’s not pulling the SSL link to the image. Keeps it at https://
<li id="wp-admin-bar-my-account" class="menupop with-avatar"><a class="ab-item" aria-haspopup="true" href="https://www.hopkinsarthritis.org/wp-admin/profile.php" title="My Account">Howdy, Arthritis Center<img alt='Arthritis Center' src='https://www.hopkinsarthritis.org/wp-content/uploads/2011/11/Arthritis-Center_avatar-16x16.png' class='avatar avatar-16 photo' height='16' width='16' /></a><div class="ab-sub-wrapper"><ul id="wp-admin-bar-user-actions" class="ab-submenu">
<li id="wp-admin-bar-user-info"><a class="ab-item" tabindex="-1" href="https://www.hopkinsarthritis.org/wp-admin/profile.php"><img alt='Arthritis Center' src='https://www.hopkinsarthritis.org/wp-content/uploads/2011/11/Arthritis-Center_avatar-64x64.png' class='avatar avatar-64 photo' height='64' width='64' /><span class='display-name'>Arthritis Center</span><span class='username'>weslinda</span></a> </li>
The site URL is input as HTTP because we don’t force SSL on the entire site. We force SSL in the admin area, and I believe that if I force for the entire site, it still calls the https:// version of the link.
Not sure how WordPress itself does it, but it seems to call other images in the admin properly. Wish I knew more about how to code this properly, I’d drop in an answer as quickly as I could figure it out, unfortunately, I’m a design guy, not really a developer guy.