Skip to main content

If a site is not HTTPS, Google Chrome will tell users it's not secure

The Google Chrome logo set against a rocky background image.
Image used with permission by copyright holder
The tech giants of the world are continuing their efforts to make the web a safer place, and Google Chrome is leading the charge. On Thursday, the Silicon Valley tech giant announced that Chrome will begin marking HTTP pages as nonsecure if they collect passwords or credit card information. This, the company hopes, will encourage more sites to move toward HTTPS — and otherwise adhere to general security guidelines — in order to secure their traffic.

“To help users browse safely, Chrome indicates connection security with an icon in the address bar,” Google explained in its Chromium blog. “Historically, Chrome has not explicitly labeled HTTP connections as nonsecure,” but that changes starting in version 56. Over the next few weeks, site visitors will be warned when they land on an HTTP instead of HTTPS site — this is “part of a long-term plan to mark all HTTP sites as nonsecure,” Google said.

Recommended Videos

Google has long held influence over the state of the web — both on desktop and mobile. Last year, the internet behemoth announced that it would start knocking sites if they weren’t mobile responsive, which lowers their search ranking. This certainly helped to spur an increase in mobile-responsive sites, making it easier for smartphone users to browse the web on their handheld devices.

Security is more important than ever, particularly given the increasing frequency with which breaches and hacks now occur. Google Chrome’s decision to begin explicitly marking insecure connections is aimed squarely at the issue.

Separately, Chrome 56 will also allow sites to interact with Bluetooth Low Energy (BLE) devices using the Web Bluetooth API across operating systems, including Android, Chrome OS, and Mac. As per the Chromium blog, web developers will be able to “connect to bluetooth devices such as printers and LED displays with just a few lines of JavaScript.” 

And finally, the latest version of Chrome will support CSS position: sticky, a new way to position elements. The blog explains, “A position: sticky element is relatively positioned, but becomes position: fixed after the user reaches a certain scroll position … Now, users can achieve the desired effect by simply positioning their elements as sticky.” 

Lulu Chang
Former Digital Trends Contributor
Fascinated by the effects of technology on human interaction, Lulu believes that if her parents can use your new app…
This new Google Chrome security warning is very important
The Google Chrome logo on a black phone which is resting on a red book

Google is changing how it warns its users about suspicious files on Chrome by adding new full-page warnings and cloud scanning regarding suspicious downloads, according to Windows Report. This is an attempt to explain more precisely why it blocks specific downloads. Google says that the AI models will divide the warning into two categories: "suspicious" or "dangerous."

The new warning system primarily benefits those using the anti-phishing Enhanced protection feature. The files users upload to the cloud for an automatic scan and those that undergo a deep scan are 50 times more likely to have the AI flag them as malware.

Read more
Google just gave up on its proposed makeover of the internet
Google Chrome browser running on Android Automotive in a car.

Google announced on Monday that it will pull the brakes on phasing out the use of third-party cookies on its Chrome browser because of concerns from regulators, competitors, and privacy advocates, the tech giant said in a Privacy Sandbox post. Instead, Google will be going in a different direction that will let users choose how they interact with third-party cookies.

Blocking third-party cookies would have presented a hurdle for remarketing, which lets companies serve you ads based on your previous activity around the web.

Read more
Google is cracking down on internet security in this big way
Connection is not private warning from Google.

Google is making some serious changes to digital certificate security on the web, the company announced on its Security blog. The big news is that Google will no longer trust certificates from two large security firms -- Entrust or AffirmTrust -- due to repeated security lapses.

According to Google, the companies, which are Certificate Authorities (CA), have demonstrated patterns of unmet improvement commitments, compliance failures, and no measurable progress in how fast the company responds to publicly disclosed incident reports.

Read more