Great question — answering as the UphillTech team:
As browsers are more and more frowning upon such cases the only real solution is to make sure that all the content is served over HTTPS (more precisely: if the page is served over HTTPS then everything it depends on - fonts, scripts, stylesheets, iframes, etc. - is also served over HTTPS; if the page is server itself over HTTP, the other content can be be served over HTTP or HTTPS just fine, but browsers do also push for HTTPS everywhere). Latest example: https://blog.chromium.org/2020/02/protecting-users-from-insecure.html Today we’re announcing that Chrome will gradually ensure that secure (HTTPS) pages only download secure files. In a series of steps outlined below, we’ll start blocking...
Full answer by Patrick Mevzek: https://webmasters.stackexchange.com/a/127871 (CC BY-SA 4.0).
Need it done for your business? UphillTech.
