Google Chrome Flags all HTTP sites “Not Secured”
Published February 6, 2019 •
Google worked on something that they would want their users to feel secure. Last year, Google has officially warned website owners who are not identified as an HTTPs (Hyper Text Transfer Protocol Secure) site would have their site identified as a non-secured website.
Moving toward encryption by default is a monumental change for the Web. With unencrypted pages, somebody like an Internet service provider, taxi or airport Wi-Fi operator, or malicious hacker offering a “free Wi-Fi” hot spot can read all the data sent to and from a computer. A hacker can also modify a Web page, and an ISP can insert its own advertising. To block against that kind of eavesdropping and tampering, Google encrypted its Gmail connections and search site in 2010, and Yahoo and Microsoft have followed suit.
Progress report on developers who transitioned their sites to HTTPS:
Over 68% of Chrome traffic on both Android and Windows is now protected
Over 78% of Chrome traffic on both Chrome OS and Mac is now protected
81 of the top 100 sites on the web use HTTPS by default
According to Google, it is successful.
What are SSL Certificates?
SSL (Secure Sockets Layer) meaning when visiting a site an encrypted link is created between your web server and your browser. SSL want to keep internet connection secure with any sensitive data that is being sent between two systems, it aims to prevent criminals from reading and modifying any information transferred, including the personal details of your potential clients.
“We know that active tampering and surveillance attacks, as well as passive surveillance attacks, are not theoretical but are in fact commonplace on the Web,” Chris Palmer, a security programmer on Google’s Chrome team, said last month in a mailing list post explaining the plan.
Why are SSL Certificates essential?
- Establishes Trust and Builds Brand Power
Your customer will be seeing a green lock icon that indicates that it is secure encryption. Your customer will feel at ease to know that the information that they are giving you is safe.
- Provides Encryption of Sensitive Information
The information you send from one server to another any server that is in between can view all the information you are sending. By using SSL it can secure the data you are sending because no one can view it except to the server you are sending it to.
- Provides Authentication
Certification Authority issues an SSL certificate to an organization and its domain/website, they verify if the third party has authenticated the organization’s identity. The browser instantly lets us know if the website is secure and the potential client can feel safe when entering their confidential information.
- Chrome Displays your site properly
Anyone who will view your website which doesn’t have an SSL Certificate, instead of seeing your website they will be alerted that they will be alerted that the connection is not private.
Google has worked to counter one perception standing in the way of HTTPS: that HTTPS requires more powerful and therefore expensive hardware for Web Developers. However, SSL is the encryption standard underlying HTTPS. As Google’s Security Expert Adam Langley argued back in 2010, it’s not the expensive anymore.
Chrome’s new interface will surely help users know that HTTP sites are not secured and continue to a more secure site.
At Design Source Media, we think that security doesn’t need to be expensive.