A secure page can still ask for parts of itself, such as images, scripts or frames, over plain http. Those parts could be read or changed on the way to you. This is called mixed content.
- Scripts, frames and other active content could change the whole page, so Hominis blocks them. Parts of the page may not work as a result.
- Images, audio and video are upgraded to a secure connection where the server allows it. Anything that can’t be upgraded may still load, and the trust panel shows Connection has warnings.
What you can do
Click the site’s icon on the tile header to open the trust panel and see what it reports. For your own sites, serve every resource over https. On someone else’s site, avoid entering sensitive information while the warning shows, and let the site’s owner know.