confirmation and countermeasure in the case of a block with mixed contents

Confirmation and Countermeasure of blended contents in block

Open: 2019 / 10 / 04

The current chrome shows mixed content, but it will be blocked completely in chrome 81 in the future. This page will guide you about the possible measures from now on.

Table of contents

Google announced it will block blending content from chrome

It is expected that the function to warn and block mixed content will be gradually implemented in chrome. It is recommended that web operators be able to resolve the state of mixed content prior to implementation in chrome.

Chrome 79 (released in December 2019)

In previous versions such as chrome 78, there was an icon (shield mark) that can block blocks of mixed content next to the URL bar (address bar). In chrome 79, the icon is lost, and the function is moved to Chrome's site setting screen

Chrome 80 (released in January 2020)

Chrome 81 (scheduled for February 2020)

How to identify and control mixed content

Confirmation method

Measures

The chrome developer tool shows mixed content locations. (*) modifying the HTML in the corresponding place will resolve the mixed content state.

There are three points to care about.

Load image and video URL
CSS to read URL
Load JavaScript

A bad example

Good examples

script src="//jpdirect.jp/widgets/js/jquery.js" script src="/widgets/js/jquery.js"

Summary

Chrome 79 will further enhance the mix content. In chrome 81 scheduled for release in February 2020, the content of the mixed content is blocked, and the image etc.will not be displayed. It is recommended that the web operator be able to make sure that it is mixed content beforehand.

Jprs server certificate

This is an SSL / TLS server certificate provided by jprs (Japan registry services), which registers and registers. JJP has been registered for over 15 million registration, and jprs has operated jpdns for no more than 15 years since its establishment. The quality of relief and trust is realized in SSL / TLS server certificates.

A transfer option is provided to transfer the remaining expiration date to the jprs server certificate for 12 months. Since the remaining expiration date is added, there is no number of days when it becomes useless.

Jprs server certificate
Merritt and demerit
"Why not be safe" and the reason and cancellation method displayed on the iPhone
To prevent the "unprotected communication" from being displayed

IMCAFS