In encryption mode, Chrome indicates that HTTP sites are "insecure".



[ad_1]

  https: //final-jpg.jpg

[Image: ZDNet]

Chrome will start today to mark sites that do not use HTTPS as "unsafe".

First announced two years ago, Google said it would report any site that still uses unencrypted HTTP to deliver its content in the latest version of Chrome on Tuesday. This is part of the company's efforts for years to gradually encourage webmasters and site owners to adopt HTTPS, a secure encryption standard for data in transit.

Any site that does not load with a green padlock or a "secure" message in the browser's address bar will be marked – and shamed – as unsecured.

Read also: In push security, Chrome will soon mark each HTTP page as unsafe

In simple terms, HTTPS provides security but also integrity. This green padlock means that all data sent from your computer or device to this website and vice versa is transmitted securely and can not be intercepted by an attacker. Because HTTPS encapsulates an encrypted tunnel around the site and anyone who visits it, users also know that the site has been changed by anyone other than the site owner.

This means that even if you are an unsecured public and Wi-Fi hotspot, accessing an HTTPS site can protect your network traffic from anyone spying on the network.

For years, HTTPS was previously restricted to banks and major e-commerce sites. But now, it's for everyone – including news sites and social networks and even blogs. And thanks to the prevalence of free HTTPS certificates from groups such as Let's Encrypt, there's no better excuse to make the jump.

Still, according to the nightly data compiled by security experts Troy Hunt and Scott Helme, about 100 of the top 500 websites continue to distribute their pages via unencrypted HTTP – all of which will now be considered " unsecured ".

Many of these sites – like Baidu, JD.com and Google.cn – are Chinese-language sites, but many popular Western sites – including BBC.com, DailyMail.co.uk and Fedex.com – – HTTP are.

On the first million sites, just over half does not redirect to HTTPS.

When you update your Chrome browser, you begin to see the warnings. 19659005] Chrome currently has about 60% of the total share of browser usage, statistics show, which means that marking sites like "unsecure" will have a power of attraction. Just overnight, several HTTP sites have made the switch to HTTPS to escape the name and shame of the browser.

Also read: 10 tips to get the most out of Google Chrome – TechRepublic [19659005] But HTTPS is not a gold shield for web security. This does not mean that the data you submit to a site – such as files, photos, or messages – is stored securely and does not violate.

The current browser version, Chrome 68, also comes with -blocking and better key management in full-screen mode. Chrome 70, which is scheduled for October, will go even further and mark the "unsecured" sites in red to warn of dangers.


Got a tip?

You can send safe tips on Signal and WhatsApp at 646-755-8849. You can also send PGP email with the imprint: 4D0E 92F2 E36A EC51 DAAE 5D97 CB8C 15FA EB6C EEA5.

Read more

[ad_2]
Source link