Comment on Font that creates chartsComments−ta1212114yIs there any particular reason the link is HTTPS, especially considering that the page contains no sensitive content, and a warning about non-SSL content when it's loaded?−tptacek14yBecause it's on a site that accepts credit cards and has a prominent "Buy" link on the page itself.−ta1212114yI guess that makes sense, but doesn't the mixed content warning make it moot? Doesn't that mean unauthenticated javascript can be inserted?−tptacek14yThey should fix that, yes.
Comments
Is there any particular reason the link is HTTPS, especially considering that the page contains no sensitive content, and a warning about non-SSL content when it's loaded?
Because it's on a site that accepts credit cards and has a prominent "Buy" link on the page itself.
I guess that makes sense, but doesn't the mixed content warning make it moot? Doesn't that mean unauthenticated javascript can be inserted?
They should fix that, yes.