A method, system and computer program product for retrieving both sensitive and non-sensitive content in a secure manner. After a proxy server establishes a secure connection between a client device and a web server, the client device receives the requested sensitive content, which includes an index file that contains a hash value that was generated by the web server. The web browser of the client device further issues a request to the proxy server to establish a non-secure connection to retrieve non-sensitive static content from the web server. After receiving the requested content, the web browser of the client device generates a hash value over the received content. If this generated hash value is equal to the hash value contained in the index file, then the web browser accepts the received non-sensitive static content. In this manner, both sensitive and non-sensitive content can be retrieved in a secure manner.