SSL certificates and mixed Content

You may have seen on Internet Explorer the message:

"Only secure content is displayed"

or on Firefox:

"Firefox has blocked content that isn't secure"

What is mixed content?

Mixed content is spotted on a page that holds both secured (HTTPS) and non secured (HTTP) elements.

This often happens with online stores or financial sites that display images, banners, or scripts that are coming from a server that is not secured. The risk of displaying mixed content is that a non-secure webpage or script might be able to access information from the secure content.

What do web users see?

Browsers such as Firefox and Internet Explorer display a security alert and only authorize the secured elements of the page by default. All the HTTP one are deactivated and that may lead to layout issues.

Removing mixed content

To remove the mixed content alert, all the elements of your web pages must be called for in HTTP. Usually you'll only have to edit a few links to indicate https:// instead of http://. About the non secured content from external sources: you'll need to get its HTTPS version for the editor.

Useful links

• Microsoft support: “Only secure content is displayed” notification
• Mozilla support: How does content that isn't secure affect my safety?