September 8, 2017

Google Chrome to Label Non-HTTPS Sites as ‘’Not Secure’’

A new version of Google Chrome is on its way and with it comes a safer surfing experience for its users. From October 2017, Google Chrome will display a ‘’Not Secure’’ message in the address window of websites that do not use encrypted Hyper Text Transfer Protocol Secure (HTTPS) to protect its visitor data.

What is HTTPS?

HTTP = Not Secure

HTTPS = Secure

Back in the day when the internet was young, network administrators needed a way to share information they put on the world wide web. It was agreed that the best protocol for this was Hyper Text Transfer Protocol (HTTP).

Once HTTP had been around for a while it became easier to intercept and hack information being exchanged. As a result, administrators agreed on a secure procedure to protect shared information. This protection is provided by an SSL certificate which is used to encrypt online data. Encryption protects shared information by translating it into a code which only the sender and recipient can decipher.

This procedure of encrypting information and then sharing it is called HTTPS.

Why is HTTPS Important?

HTTPS is your website security seal and tells your visitors that your website is safe and secure to share information with. Typically, HTTPS has been employed to protect user information on websites that facilitate online transactions like online banking and shopping. However, Google will now flag your site as not-secure if you collect ANY any visitor information without employing HTTPS.

What’s Changing?

From October, Google Chrome will mark HTTP pages “Not Secure” in the URL bar under the following conditions:

The user is browsing in Chrome incognito mode.
The page contains a password field.
The user interacts with any input field.

Though this is a positive step towards greater online security, it could confuse your visitors who may interpret the message to believe that your website has been compromised or that your site has an underlying security issue. Especially if you’re an online retailer.

HTTPS is the way forward and you should consider the shift from HTTP to prevent Google Chrome penalizing your website in search results and telling your visitors that your site is not secure.

How do I switch from HTTP to HTTPS?

Most websites will use a Secure Socket Layer (SSL) or Transport Layer (TLS) certificate to protect visitor information. Whenever you see that a site is using HTTPS, as opposed to HTTP, you know that SSL or TLS is being used.

How will visitors know my site has an SSL certificate?

There are four visual clues:

Padlock to the left of a URL
https URL prefix instead of http
A trust seal
A green address bar

Do I need to switch from HTTP to HTTPS?

Typically, HTTPS has been used to protect websites that facilitate online transactions such as banking and shopping etc. However, with Google Chrome announcing it will now flag a ”Not Secure” warning on any website not employing HTTPS, it is probably best to make the switch. By making the switch, you are telling your customers that your website is safe and that their privacy is your priority.