It has been two years since the Google Chrome team announces that they would eventually mark websites that doesn’t use encryption with HTTPS as ‘not secure’. Today, Chrome will be rolling out its latest security update, Chrome 68, which will now include making HTTP pages as unsecured. This will make it easier for users to know whether their personal information is safe in a particular website.
Chrome 68: More Encryptions, Better Security
Loading up an HTTP website that’s not encrypted can potentially leak user’s personal information having the network open for anyone to look for information going back and forth or modify the contents of the website before it loads up to the user. With HTTPS, connection to the website is encrypted which protects the user from eavesdroppers that’s on the lookout for your personal information such as passwords and credit card information. Google Chrome’s “not secure” warning helps users to understand when the connection to the site is secure and also to motivate website owners to improve the security on their website.
As of this press release, here is Google’s Transparency Report:
- 76% of Chrome traffic on Android is now protected, up from 42%
- 85% of Chrome traffic on ChromeOS is now protected, up from 67%
- 83 of the top 100 sites on the web use HTTPS by default, up from 37
Eventually, Google will be removing the “secure” marking and the default unmarked state is secure. Google Chrome team will start by removing the “Secure” wording in September 2018. And in October 2018, Chrome will start showing a red “not secure” warning when users enter data on HTTP pages.
Source: https://blog.google/