Slashdot Mirror

← Back to Stories (view on slashdot.org)

Google Chrome Pushes For User Protection With 'Not secure' Label (axios.com)

Posted by msmash on from the up-next dept.

In an effort to force websites to better protect their users, the Chrome web browser will label all sites not encrypted traffic as "Not secure" in the web address bar, Google announced Thursday. From a report: Encrypted traffic allows users to access data on a website without allowing potential eavesdroppers to see anything the users visit. HTTPS also prevents meddlers from changing information in transit. During normal web browsing, Google currently displays a "Not secure" warning in the next to a site's URL if it forgoes HTTPS encryption and a user enters data. Now the browser will label all sites without HTTPS encryption this way.

4 of 85 comments (clear)

  1. Entire internet doesn't need to be https by iamhassi · · Score: 4, Insightful

    This is silly. Google is saying every website needs to be https. That's not true and is a waste of money and time to make every site https

    --
    my karma will be here long after I'm gone
    1. Re:Entire internet doesn't need to be https by nitehawk214 · · Score: 3, Insightful

      So you don't mind a 3rd party knowing the content of each webpage you have visited?

      --
      I'm a good cook. I'm a fantastic eater. - Steven Brust
    2. Re: Entire internet doesn't need to be https by Anonymous Coward · · Score: 3, Insightful

      With your browser trusting 600 CAs by default it certainly has absolutely no value without DNSSEC and DANE.

    3. Re:Entire internet doesn't need to be https by thegarbz · · Score: 1, Insightful

      This is silly. Google is saying every website needs to be https. That's not true and is a waste of money and time to make every site https

      They are doing nothing of the sort, they are only finally putting HTTP in the correct light: It's not frigging secure and never has been. The fact that so far we have put more effort into poorly encrypted but none the less far more secure than HTTP.

      It made no sense. This finally does.