Google Chrome beefs up Security warnings for non-HTTPS websites

Following file download warnings, Google is tweaking Chrome’s “Not Secure” warning (Soft of). The company is currently testing a redefined security warning in Chrome for users navigating to websites that don’t support HTTPS. This new warning aims to provide users with more information to make informed decisions. Let’s explore what we know and why this matters.

In recent years, there has been a strong push toward HTTPS adoption by major browsers and website owners due to growing concerns about online security and privacy. Chrome, in particular, has implemented various measures to encourage HTTPS usage, including the well-known “Not Secure” warning.

Chrome displays the following warning when you encounter a site that doesn’t connect over a secure connection:

“The connection to this (website) is not secure. You are seeing this warning because this site does not support HTTPS. Learn more about this warning.” Chrome provides options to navigate away from the page or continue to the site at your own risk.

It means the website you’re visiting is using the HTTP protocol instead of HTTPS. In other words, data transmitted over HTTP is sent in plain text, making it easily readable by anyone intercepting the connection.

Google tests new Security warnings for insecure sites in Chrome

Now, Google is introducing a new feature called” Balanced mode Ask Before HTTP” that shows a few warnings for insecure sites. This feature will replace the existing warning with the following message:

Here is the new warning as spotted by WindowsReport.

“Website is preventing Chrome from establishing a secure connection. Attackers will be able to see and change any data sent between you and this site.
If you’re currently on a public network, such as an airport or hotel Wi-Fi, consider trying again when you’re connected to a trusted network (e.g., at home or at work). If you know the site owner, ask them to fix this.”

Both warnings convey a similar meaning: the site lacks proper security measures. Google has also updated the text and icons in this new warning, tentatively named “HTTPS First Mode Interstitial August 2024 Refresh ” available behind a flag named “Use the new interstitial for HTTPS-First Modes”

Keep in mind that this warning may not be finalized, as Google could tweak or change the text. However, Google is actively testing this feature in Chrome.

Besides this, Chrome may get new settings for control over insecure site warnings and Chromebook is getting AI assistant Bluebuddy to fix Bluetooth issues. Additionally, Chrome may turn off the automatic password generation feature, and on Windows for text fields, the browser is getting stylus handwriting support.