Menu
Google's Chrome will soon start warning you more about HTTP pages

Google's Chrome will soon start warning you more about HTTP pages

Chrome's Incognito mode will label all HTTP pages as 'not secure' starting in October

A Google effort to push websites to implement encryption is expanding. Starting in October, the company will roll out new warnings to flag HTTP connections as insecure in its Chrome browser.

For users, it means Chrome will display the words “not secure” in the browser’s address bar whenever they type any data into web pages that connect over HTTP.

However, for users who like to browse through Chrome’s privacy-enhancing Incognito mode, the warnings will appear by default on all HTTP pages visited, not only when the user enters information onto the page.

“Eventually, we plan to show the ‘not secure’ warning for all HTTP pages, even outside Incognito mode,” Google said in a blog post on Thursday.

form and incognito http bad verbose Google

Example of how the warnings will appear on Chrome when they go into effect in Oct. 

Back in January, Google's Chrome started using its “not secure” label, but only for HTTP pages that contain password or credit card form fields.

The danger with HTTP pages is that any data transmitted to them is unencrypted, leaving it open to be spied on. Hackers can intercept the data by compromising internet routers, snooping over public Wi-Fi networks, or through man-in-the-middle attacks that involve impersonating legitimate web services.

"Passwords and credit cards are not the only types of data that should be private," Google said on Thursday. "Any type of data that users type into websites should not be accessible."

Major websites, such as Google, Twitter, and Facebook, have already moved to HTTPS, a more secure protocol which encrypts the internet connection.  

But while HTTPS has become dominant across the Web, not all sites have adopted it. That’s why Google has been using its Chrome browser to warn users about insecure HTTP pages.

The warnings will also push website operators to jump onboard the HTTPS bandwagon or face a potential drop in traffic. Since January, Google said it’s noticed a 23 percent reduction in visits to HTTP pages with password or credit card forms when viewed over a desktop computer.

Eventually, Google’s Chrome browser will not only list all HTTP pages as insecure, but it will also include a red triangle with the warning. To help websites move to HTTPS, Google has produced a set-up guide for interested developers.

Mozilla’s Firefox browser has also been taking similar steps to warn users about visiting HTTP sites, too.


Follow Us

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Featured

Slideshows

EDGE 2018: Kiwis kick back with Super Rugby before NZ session

EDGE 2018: Kiwis kick back with Super Rugby before NZ session

New Zealanders kick-started EDGE 2018 with a bout of Super Rugby before a dedicated New Zealand session, in front of more than 50 partners, vendors and distributors on Hamilton Island.​

EDGE 2018: Kiwis kick back with Super Rugby before NZ session
EDGE 2018: Kiwis assess key customer priorities through NZ research

EDGE 2018: Kiwis assess key customer priorities through NZ research

EDGE 2018 kicked off with a dedicated New Zealand track, highlighting the key customer priorities across the local market, in association with Dell EMC. Delivered through EDGE Research - leveraging Kiwi data through Tech Research Asia - more than 50 partners, vendors and distributors combined during an interactive session to assess the changing spending patterns of the end-user and the subsequent impact to the channel.

EDGE 2018: Kiwis assess key customer priorities through NZ research
Show Comments