Mar 25 2021

Chrome to Enforce HTTPS Web Protocol (Like It or Not)

Category: Information Security,Web SecurityDISC @ 1:58 pm

If you type in securityboulevard.com, Chrome version 90 will send you directly to the secure version of the site. Surprisingly, thatā€™s not what it currently doesā€”instead, Googleā€™s web browser relies on the insecure site to silently redirect you.

Thatā€™s slow. And itā€™s a privacy problem, potentially. This seemingly unimportant change could have a bigā€”if unseenā€”impact.

So long, cleartext web. In todayā€™s SB Blogwatch, we hardly knew ye.

Your humble blogwatcher curated these bloggy bits for your entertainment. Not to mention: Making breakfast.

What a Difference an ā€˜sā€™ Makes

Whatā€™s the craic?Ā Thomas Claburn reportsā€”ā€œChrome 90 goes HTTPS by defaultā€:

ā€ŠLack of security is currently the norm in Chrome. ā€¦ The same is true in other browsers. ā€¦ This made sense in the past when most websites had not implemented support for HTTP.
ā€¦
But these days, most of the web pages loaded rely on secure transport. ā€¦ Among the top 100 websites, 97 of them currently default to HTTPS. [So] when version 90 of Googleā€™s Chrome browser arrives in mid-April, initial website visits will default to a secure HTTPS connection.

Chrome to Enforce HTTPS Web Protocol (Like It or Not)

Tags: HTTPS Web Protocol