[thelist] http/https framesets: risk assessment?

[s t e f]

Hello all,

I saw recently a site that mixed frames within framesets, some through
http and  some through https. I received of course several security alerts
and that got me wondering as to what precisely are the risks of using
mixed-protocols framesets.

(just in case I'd be forced to put up this type of configuration one day
and what to anwser ;-))

Anybody would care to enlighten me?

TIA,
s t e f