3 ms·
So while loading the seal over standard http is not a security issue in itself there is the problem of mixed content when loaded over https. This could leave t
by andygambles 13y ago
So while loading the seal over standard http is not a security issue in itself there is the problem of mixed content when loaded over https.
This could leave the site open to a MiTM style attack since security fatigue means the user just loads insecure content. The http request could then potentially be redirected to load an alternative content.
- kdecherf 13y agoNote: Firefox 23 (currently active in Nightly) will block insecure content by default
- andygambles 13y agoimages are classed as passive content by Firefox 23 so by default they will load just the padlock will not show. More info: https://blog.servertastic.com/firefox-23-to-block-mixed-content/ https://blog.servertastic.com/firefox-23-to-block-mixed-cont...
- kdecherf 13y agoHm, good to know