On 03/10/2019 it was announced that Chrome will begin ensuring that https:// pages can only load secure https:// subresources.

Chrome will begin blocking mixed content (insecure http:// subresources on https:// pages) by default. This change will improve user privacy and security on the web, whilst giving clearer browser security to users.

So what is mixed content?

Mixed content is when a secure web page (https://) also contains linked content that is served through the insecure HTTP protocol (http://).

Mixed content already presents a security risk for your site as well as your site’s visitors. But, now the lack of SSL certificate will effect the usability of the site, with Chrome being the first browser to confirm it will begin blocking unsecure sites.

More than 90% of browsing time spent on Google Chrome is done so on secure sites, with a secure site instantly having improved SEO. Mozilla has also been pushing for the increased uptake of https sites.

How Chrome will handle Mixed Content

At current, google loads pages with mixed content. But beginning in December 2019, with the introduction of Chrome 79, Google will do two things:

• Automatically upgrade http content to https if that resource exists on https (if not it will be blocked)
• Introduce a toggle that a chrome user can use to unblock insecure resources that are being blocked by chrome

Although it may not be a full blocking, it may as well be. Users may opt to back out of a site that displays a security warning. This will lead to bad experiences for publishers and could even decrease sales, visitors, and ad views.

In January 2020 Google will remove the unblocking option and begin fully blocking mixed content web pages.

How to avoid any disruption on your website?

If your site is not already secure, invest in an SSL certificate and be sure to follow best practices when implementing HTTPS. Any secure web page will show you a padlock next to the web address within your chrome browser.

It is crucial to check that this appears on every page within your website.

Your hosting provider should be able to advise you on this.

If you’re still stuck, contact us today to see how we can help. Dentons Digital provides hosting packages from £19.99/month: this always includes an SSL certificate.