Chrome to Block all Mixed Content

Chrome to begin blocking mixed content from December.

On 03/10/2019 it was announced that Chrome will begin ensuring that https:// pages can only load secure https:// subresources.

Chrome will begin blocking mixed content (insecure http:// subresources on https:// pages) by default. This change will improve user privacy and security on the web, whilst giving clearer browser security to users.

So what is mixed content?

Mixed content is when a secure web page (https://) also contains linked content that is served through the insecure HTTP protocol (http://).

Mixed content already presents a security risk for your site as well as your site’s visitors. But, now the lack of SSL certificate will effect the usability of the site, with Chrome being the first browser to confirm it will begin blocking unsecure sites.

More than 90% of browsing time spent on Google Chrome is done so on secure sites, with a secure site instantly having improved SEO. Mozilla has also been pushing for the increased uptake of https sites.

How Chrome will handle Mixed Content

At current, google loads pages with mixed content. But beginning in December 2019, with the introduction of Chrome 79, Google will do two things:

  • Automatically upgrade http content to https if that resource exists on https (if not it will be blocked)
  • Introduce a toggle that a chrome user can use to unblock insecure resources that are being blocked by chrome

Although it may not be a full blocking, it may as well be. Users may opt to back out of a site that displays a security warning. This will lead to bad experiences for publishers and could even decrease sales, visitors, and ad views.

In January 2020 Google will remove the unblocking option and begin fully blocking mixed content web pages.

How to avoid any disruption on your website?

Google secure padlock

If your site is not already secure, invest in an SSL certificate and be sure to follow best practices when implementing HTTPS. Any secure web page will show you a padlock next to the web address within your chrome browser.

It is crucial to check that this appears on every page within your website.

Your hosting provider should be able to advise you on this.

If you’re still stuck, contact us today to see how we can help. Dentons Digital provides hosting packages from £19.99/month: this always includes an SSL certificate.

About The Author

Phil Mitchell

Phil Mitchell

Phil has been interested in technology since he got his first Acorn Electron and started programming in basic. He has worked for many companies in the digital field whether that is developing or marketing. His main skillset is driving traffic primarily via PPC advertising as he said ‘it is binary you spend X amount and need to make more than that to profit. You either make a profit or not there is no talking around it.’

Share this post

Share on facebook
Share on twitter
Share on linkedin
Share on pinterest
Share on print
Share on email

Related Posts

What We Provide

We provide custom web development, purpose-built for the needs of your customers and business. Through every step of the development process, we’ll stay in full contact with you to ensure your site is accessible and usable.

Call us on 01373 580126 or click on the link below to see how we can help you.