Yes it means that the connection is not secure and could be compromised.

https://support.mozilla.org/en-US/kb/mixed-content-blocking-firefox?redirectlocale=en-US&as=u&redirectslug=how-does-content-isnt-secure-affect-my-safety&utm_source=inproduct

Mixed content weakens HTTPS

Requesting subresources using the insecure HTTP protocol weakens the security of the entire page, as these requests are vulnerable to man-in-the-middle attacks, where an attacker eavesdrops on a network connection and views or modifies the communication between two parties. Using these resources, an attacker can often take complete control over the page, not just the compromised resource.

Although many browsers report mixed content warnings to the user, by the time this happens, it is too late: the insecure requests have already been performed and the security of the page is compromised. This scenario is, unfortunately, quite common in the web, which is why browsers can’t just block all mixed requests without restricting the functionality of many sites."

https://developers.google.com/web/fundamentals/security/prevent-mixed-content/what-is-mixed-content?hl=en

What i mean is that, i tried all the links that are in Http with https and they worked. I have dealt with mixed content scenario and its a nightmare. you have to use jsonp and stuff. try this

<div id="recaptcha_btn_container">
<a title="Get a new challenge" id="recaptcha_reload_btn" href="javascript:Recaptcha.reload()">
<img id="recaptcha_reload" alt="Get a new challenge" src="https://www.google.com/recaptcha/api/img/clean/refresh.png" height="18" width="25"></a>
<a title="Get an audio challenge" id="recaptcha_switch_audio_btn" class="recaptcha_only_if_image">
<img id="recaptcha_switch_audio" alt="Get an audio challenge" src="https://www.google.com/recaptcha/api/img/clean/audio.png" height="15" width="25"></a>
<a title="Get a visual challenge" id="recaptcha_switch_img_btn" class="recaptcha_only_if_audio">
<img id="recaptcha_switch_img" alt="Get a visual challenge" src="https://www.google.com/recaptcha/api/img/clean/text.png" height="15" width="25"></a>
<a title="Help" id="recaptcha_whatsthis_btn" href="javascript:Recaptcha.showhelp()">
<img alt="Help" id="recaptcha_whatsthis" src="https://www.google.com/recaptcha/api/img/clean/help.png" height="16" width="25"></a>
</div>

The code that I posted is actually automatically generated using the Recapture Widget that comes with Laserfiche Forms 10. This is why I put in the feature request.

Just curious as to why you are choosing to use the recaptcha widget instead of the honeypot captcha option?

That's interesting. I tried it and its same for me. there has to be an option for both https and http. When i choose honeypot captcha nothing shows up.

Honeypot captcha does not put anything on the user interface, but instead creates a hidden field. When bots go to fill out a form and that field has a value in it, it does not allow the form to be submitted. It's a lot easier than having end users guess what number or letters are on a little box.