The new Chrome update block all downloads from insecure sites AKA HTTP. That won’t stop someone from uploading viral materials to an HTTPS sit, but it will stop man in the middle attacks which intercept an unencrypted connection (AKA Mixed Content) and replace an a safe file with a infested one.
What is Mixed Content
Mixed content is when a secure web page (loaded through HTTPS) also contains scripts, styles, images or other linked content that is served through the insecure HTTP protocol. This is called mixed content.
Mixed content presents a security risk for your site visitor as well as to your website.
The rollout will start with warnings for users and eventually an outright block,.
The updates will hit Linux, macOS, and Windows machines first, with a month delay for Android and iOS.
