Nix to the mix: Chrome to block passive HTTP content swirled into HTTPS pages

Nix to the mix: Chrome to block passive HTTP content swirled into HTTPS pages

Warns site owners: Images, audio, video will be barred in gradual process


Google has announced forthcoming changes to the Chrome web browser that will prevent image, audio and video content from loading if they are served over HTTP.


A typical web page includes content from multiple sources, and it is not really encrypted unless all the content is served over HTTPS. Chrome already blocks most HTTP content on HTTPS pages, including active content such as scripts and iframes, but allows media to load. Google admitted this is insecure, noting:



For example, an attacker could tamper with a mixed image of a stock chart to mislead investors, or inject a tracking cookie into a mixed resource load. Loading mixed ..

Support the originator by clicking the read the rest link below.