&gt;It was mind boggling that mixed content was &quot;insecure&quot; but HTTP was &quot;secure.&quot; HTTP is and always has been insecure and should be marked as such.<p>Why is it mind boggling?<p>Content served over HTTP is obviously less sensitive than content served over HTTPS, mixed content breaks HTTPS.