Web pages loaded over HTTPS that contain insecure elements

Ground Sloth · 05 Apr 2018

What should you do when both Firefox and Chrome warn you that a web page loaded over HTTPS is not fully secure because some elements on the page (like images) were not loaded over a secure connection?

I get this warning on the Dell website, as well as the Samsung website, on web pages where you enter personal information. I know that Firefox and Chrome will block web pages loaded over HTTPS that are truly insecure. But whenever I see this warning, I'm extremely reluctant to enter any personal information.

shimshom · 05 Apr 2018

Try to use the HTTPS Everywhere extension which for Firefox is below but not sure if it exists for Chrome as I don't use it.

https://addons.mozilla.org/en-US/fir...ps-everywhere/

slicendice · 06 Apr 2018

Ground Sloth said:

What should you do when both Firefox and Chrome warn you that a web page loaded over HTTPS is not fully secure because some elements on the page (like images) were not loaded over a secure connection?

I get this warning on the Dell website, as well as the Samsung website, on web pages where you enter personal information. I know that Firefox and Chrome will block web pages loaded over HTTPS that are truly insecure. But whenever I see this warning, I'm extremely reluctant to enter any personal information.

That is an DELL and Samsung website design issue and there isn't much you can do about that. I get the same errors on all browsers, IE, Edge, Chrome and Firefox.

Ground Sloth · 06 Apr 2018

shimshom said:

Try to use the HTTPS Everywhere extension which for Firefox is below but not sure if it exists for Chrome as I don't use it.

https://addons.mozilla.org/en-US/fir...ps-everywhere/

What if something on the web page can't be loaded over HTTPS? Will it be blocked?

slicendice said:

That is an DELL and Samsung website design issue and there isn't much you can do about that. I get the same errors on all browsers, IE, Edge, Chrome and Firefox.

The warning should be more pronounced so that Dell and Samsung would be forced to redesign their websites.

Sometimes the parts of a web page that are not secure will be blocked automatically, thus effectively rendering the web page secure. But on the Samsung web site, for example, Firefox says that while it's blocking some content that is not secure, there is still content on the web page that is not secure. I wonder if you can get Firefox to block the other content.