tl;dr If you're on Firefox you can temporarily disable mixed http/https protection using the padlock icon near the URL. Of course it goes without saying that yo

tl;dr If you're on Firefox you can temporarily disable mixed http/https protection using the padlock icon near the URL. Of course it goes without saying that you should never provide anything sensitive with this protection disabled as MITM attacks are possible. [1] The setup of this page is strange. http forwards to https but all the assets (JS, images, CSS) are full domain http only inside a served https page. There also some references that use the protocol free // prefix so the authors knew this was possible if they wanted both http and https but only used it in some parts of the page. [1]: https://developer.mozilla.org/en-US/docs/Web/Security/Mixed_content https://developer.mozilla.org/en-US/docs/Web/Security/Mixed_...