← Back to glossary

🧩

Mixed Content

Web Security

TLS (Transport Layer Security) HTTPS Man‑in‑the‑Middle Attack Security Headers

A secure page loading insecure resources.

Definition

Mixed content is when a HTTPS page loads something over HTTP (like an image, script, or iframe).

In plain English A secure page loading insecure resources.

Why this matters

Why it matters: Insecure parts can be altered or used to track or attack users—even if the main page is HTTPS.

Example

Example: A HTTPS site loads a tracking script from an HTTP URL.