---
title: "HTTPS connection displays mixed-mode notice"
date: "2016-04-29"
category: "ssl"
slug: "https-connection-displays-mixed-mode-notice"
---

When visiting an SSL-protected website, your browser may display a "mixed content" warning or show an altered security indicator.

![mixed-mode-indicator](kb-image:mixed-mode-indicator.png)
*Mixed content warning in Firefox*

## Cause

Mixed content occurs when an HTTPS page loads resources (images, scripts, stylesheets) over an unencrypted `http://` connection. For example, including `<img src="http://mysite.com/img.jpg" />` on an HTTPS page means that image request is sent without encryption, allowing third parties to potentially intercept the traffic. Browsers flag this as a security concern.

## Solution

Update all resource URLs on your site to use HTTPS. There are two approaches:

- **Use HTTPS explicitly**: Change `http://` to `https://` in all resource links.
- **Use protocol-relative URLs**: Omit the protocol entirely so `<img src="http://mysite.com/img.jpg" />` becomes `<img src="//mysite.com/img.jpg" />`. The browser will match the protocol of the parent page.

## See Also

- [The Protocol-relative URL](http://www.paulirish.com/2010/the-protocol-relative-url/) (Paul Irish)
