Shulou(Shulou.com)06/01 Report--

Migration from HTTP to HTTPS, UI change of Chrome browser

Frequent users of Chrome browsers or developers engaged in Web development have noticed frequent changes to "secure UI" in the past two years. (the logo is changed to clearly tell users whether the page they visit is secure. )

In the past decade, HTTPS has experienced a comeback from the dead, because a large number of network data loss, privacy data theft and other events are increasing in recent years, seriously affecting the global network security. In the network transport protocol, the encryption function of HTTPS is more secure than HTTP. Therefore, in order to further promote the development of HTTPS, the security UI of Chrome takes different changes according to the adoption phase of HTTPS.

This gradual change is designed to help users adapt to the evolving Internet environment. In 2014, most of the pages loaded by Chrome are still using HTTP. So far, 75% of the pages have been accessed through HTTPS, and the user interface is undergoing earth-shaking changes.

Chrome's "safe UI" has not yet been settled, and there will be changes in the future. Sites that have not yet deployed HTTPS, or HTTPS sites that only protect landing pages, must be closely watched. Chrome issued a continuous unsafe warning to the HTTP page and will further restrict other functions. In order not to affect the brand image of the website, it is recommended to complete the HTTPS deployment of the website as soon as possible. Because other major browsers will also follow the most Chrome policy and impose further restrictions on HTTP.

Chrome68 issues the latest warning

With the popularity of HTTPS, most websites are secure. On the other hand, Chrome hopes to turn the security indicators that promote HTTPS to the insecurity indicators of HTTP, and strongly identify the insecurity of HTTPS to users.

Chrome 68, which will be released in July, will demonstrate this feature, warning all HTTP about insecurity.

For sites that are still using HTTP, there will be an "unsafe" warning in the left address bar of Chrome 68, explicitly telling end users that this is an "unsafe" site. In order to avoid this situation, it is recommended that the majority of webmasters use SSL certificate as soon as possible to deploy HTTPS correctly for the whole station.

Chrome69 version and future presentation

Chrome 68 adds an "unsafe" warning to HTTP pages, while Chrome 69 (expected to be released in September) will begin to remove the HTTPS page security directive logo.

The "Secure" text in HTTPS will disappear in Chrome 69. The "Secure" tag was added in 2016 because the usage of HTTPS was much lower than that of HTTP at that time, in order to encourage more sites to add HTTPS,Chrome to express support for HTTPS sites through the "Secure" friendly tag. But the latest user research shows that negative tags are more effective than positive enhancements, so the Chrome team hopes to replace HTTP's "security" with the "unsafe" logo of HTTP to warn users not to share any sensitive information on HTTP pages.

In the future, Chrome will adjust the metrics of the new version. The following is the reference for the following version changes:

Upcoming Chrome UI changes:

Global trusted CA institutions

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.