"Simplifying the Page Security Icon in Chrome": Chrome 46 changes how we treat mixed content googleonlinesecurity.blogspo… /cc @fugueish @lgarron

Simplifying the Page Security Icon in Chrome

Posted by Lucas Garron and Chris Palmer, Chrome security team Sometimes, websites try to use HTTPS to be secure and get it mostly right, b...

security.googleblog.com
7
60
54
@fugueish @bilcorry @__apf__ @lgarron w3.org/TR/mixed-content/#str…
1
1
2
Replying to @hillbrad
@hillbrad @fugueish @__apf__ @lgarron Thx, what if load image from non-controlled domain that's over HTTPS, then it redirects to HTTP?

Oct 14, 2015 · 4:40 AM UTC

1
Replying to @bilcorry
@bilcorry @fugueish @__apf__ @lgarron still blocked by that setting (and HSTS)