You are using Stripe.js in live mode over an insecure connection
Not only must the stripe dashboard be "test" but CiviCRM's contribution page must be rendered in "test drive" mode as well.   Is that the case?