4 ms·
I've read 3 or 4 pages on the site, and it's still not clear to me what this tool purports to do. It identifies mixed-content "issues". What does that mean? H
by teach 10y ago
I've read 3 or 4 pages on the site, and it's still not clear to me what this tool purports to do.
It identifies mixed-content "issues".
What does that mean? How is it different from the sort of information I get from Qualys SSLLabs' server test?
- iancarroll 10y agoIt sounds like it identifies cases where a secure site attempts to load insecure images, JS, etc (aka mixed content). SSL Labs tests a hostname and the strength of the connection offered by the server, but not if that page attempts to load mixed content.
- vtlynch 10y agoMixed Content is when your site is serving some of the page's content over HTTP, and some over HTTPS. This is a problem because if any piece of content is served over HTTP, browsers will count the connection as non-secure and will not display the "green padlock". This is a pretty common problem when it comes to HTTPS deployment. Normally seen with sites that were deployed/designed without any consideration for HTTPS. Hardcoded URLs, third-party services that don't offer HTTPS, absolute protocol links, and big clunky infrastructure are the most common causes. Qualy's SSL Labs does not address this. It looks at the site's SSL configuration, not the way content is served. SSL Labs helps you know if there are any issues with your certificate (old signature algorithm, common name mismatch, self-signed, certificate chain issues, etc) and crypto settings (ciphers, protocol version, etc).
- teach 10y agoI know what mixed content is. I guess because all my websites are static, I never needed anything fancier than: grep -e "http:" *.html