proxy unsecure content

[jaesivsm]

The current fix for Mixed content is to only use source that are not flagged by the browser (img src instead of srcset). As it was recently pointed out to me, browser are becoming less and less tolerant to this kind of trickery and a more perennial solution is needed.
We would also be keeping the perks of srcset.

The optimal solution would be a proxy that would be part of JARR with this caracteristic :

• would proxy only for connected users
• would proxy only unsecure content
• would work only for secured instance of JARR

NTH:

• we could, at a greater cost, whitelist the ressources we allow the proxy to accept