Quite often, I see a mixed content warning when looking at an SE chat room:

Mixed content warning

This is typically caused by images linked in chat hosted on an HTTP source, not an HTTPS one like the SE Imgur account. Sometimes it is also caused by oneboxing of external content (this particular example is from a onebox of the official SE blog; the blog is HTTPS, but the generated onebox isn't).

It shouldn't be possible for a user to submit content to chat that triggers inclusion of insecure content, creates this warning, and potentially compromises the security HTTPS provides.

You must log in to answer this question.

Browse other questions tagged .