Google recently announced changes to the Chrome web browser that will prevent images, audio and videos from loading if they are served over HTTP.
Google recently announced that Chrome web browser will gradually start ensuring that https:// pages can only load secure https:// content by blocking anything served over HTTP. This change will improve user privacy and security on the web, and present a clearer browser security user experience.
Although Google Chrome already blocks some type of mixed content on the web, Google has planned to gradually start blocking all mixed content.
From December 2019 Google Chrome will automatically upgrade HTTP content to HTTPS (if that resource exists on HTTPS) as well as introducing a toggle that a user on Chrome web browser can use to unblock insecure resources. In January 2020 Google will remove the unblocking option and begin blocking mixed content web pages, causing web pages to break. So, what is mixed content?
Mixed content presents a security risk for your site visitors as well as your website. This occurs when a webpage containing a combination of both secure (HTTPS) and non-secure (HTTP) content is delivered over SSL to the browser.
This is called mixed content as both HTTP and HTTPS content are being loaded to display the same page and can lead to a confusing browser user experience where the page is presented as neither secure or insecure - but somewhere in between.
Follow the steps below to check your site for mixed content:
Once you have navigated to the relevant URL, simply follow the three steps below:
- Right-click on the page and select 'View page source' from the menu that appears. This will show you the index.html file.
- Use a 'CTRL+F' function ( find function) and enter HTTP: into the search bar that appears in the top right-hand corner of the page.
- This will then show you the HTTP: references that require changing to HTTPS.
It is advisable to check if all assets are available via HTTPS before making the changes to ensure you are not left with broken links within your page.
If you have any questions on the above please don’t hesitate to get in touch with your account manager or reach out to firstname.lastname@example.org today!