{"id":138,"date":"2016-09-10T16:20:09","date_gmt":"2016-09-10T10:50:09","guid":{"rendered":"http:\/\/codecrunch.co\/blog\/?p=138"},"modified":"2016-09-10T16:21:53","modified_gmt":"2016-09-10T10:51:53","slug":"is-http-is-bleeding-to-death-chrome-helps-killing-it","status":"publish","type":"post","link":"https:\/\/codecrunch.co\/blog\/is-http-is-bleeding-to-death-chrome-helps-killing-it\/","title":{"rendered":"Is HTTP is Bleeding to death ? Chrome Helps Killing it."},"content":{"rendered":"<p style=\"text-align: justify;\">Google recently announced that from January 2017 onwards chrome browser will start warning users about websites using insecure HTTP connections to transmit passwords and credit card data as insecure, as part of a long-term plan to mark all HTTP sites as non-secure.<\/p>\n<p style=\"text-align: justify;\">Eventually, Chrome will add the security warning to HTTP pages when a user visits them in the browser\u2019s \u201cIncognito\u201d mode, and later the warning will roll out to all HTTP pages.<\/p>\n<p style=\"text-align: justify;\">In January, Chrome users can start looking out for the security warning in the address bar of their browser. It\u2019ll look like this at first:<\/p>\n<p style=\"text-align: justify;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-139 aligncenter\" src=\"http:\/\/codecrunch.co\/blog\/wp-content\/uploads\/2016\/09\/codecrunch_chrome_kill_http-300x118.png\" alt=\"codecrunch_chrome_kill_http\" width=\"603\" height=\"237\" srcset=\"https:\/\/codecrunch.co\/blog\/wp-content\/uploads\/2016\/09\/codecrunch_chrome_kill_http-300x118.png 300w, https:\/\/codecrunch.co\/blog\/wp-content\/uploads\/2016\/09\/codecrunch_chrome_kill_http-768x301.png 768w, https:\/\/codecrunch.co\/blog\/wp-content\/uploads\/2016\/09\/codecrunch_chrome_kill_http-1024x401.png 1024w, https:\/\/codecrunch.co\/blog\/wp-content\/uploads\/2016\/09\/codecrunch_chrome_kill_http-945x370.png 945w, https:\/\/codecrunch.co\/blog\/wp-content\/uploads\/2016\/09\/codecrunch_chrome_kill_http-600x235.png 600w, https:\/\/codecrunch.co\/blog\/wp-content\/uploads\/2016\/09\/codecrunch_chrome_kill_http.png 1600w\" sizes=\"(max-width: 603px) 100vw, 603px\" \/><\/p>\n<p style=\"text-align: justify;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-140 aligncenter\" src=\"http:\/\/codecrunch.co\/blog\/wp-content\/uploads\/2016\/09\/codecrunch_chrome_kill_http_for_https-300x146.png\" alt=\"codecrunch_chrome_kill_http_for_https\" width=\"600\" height=\"292\" srcset=\"https:\/\/codecrunch.co\/blog\/wp-content\/uploads\/2016\/09\/codecrunch_chrome_kill_http_for_https-300x146.png 300w, https:\/\/codecrunch.co\/blog\/wp-content\/uploads\/2016\/09\/codecrunch_chrome_kill_http_for_https-768x373.png 768w, https:\/\/codecrunch.co\/blog\/wp-content\/uploads\/2016\/09\/codecrunch_chrome_kill_http_for_https-1024x497.png 1024w, https:\/\/codecrunch.co\/blog\/wp-content\/uploads\/2016\/09\/codecrunch_chrome_kill_http_for_https-945x459.png 945w, https:\/\/codecrunch.co\/blog\/wp-content\/uploads\/2016\/09\/codecrunch_chrome_kill_http_for_https-600x291.png 600w, https:\/\/codecrunch.co\/blog\/wp-content\/uploads\/2016\/09\/codecrunch_chrome_kill_http_for_https.png 1152w\" sizes=\"(max-width: 600px) 100vw, 600px\" \/><\/p>\n<p style=\"text-align: justify;\">Chrome currently indicates HTTP connections with a neutral indicator. This doesn\u2019t reflect the true lack of security for HTTP connections. When you load a website over HTTP, someone else on the network can look at or modify the site before it gets to you.<\/p>\n<p style=\"text-align: justify;\">The changes seem intended to pressure site owners\u00a0to switch to a more secure HTTPS, which encrypts data while in transit and helps prevent the site from being modified by a malicious user on the network. \u201cDon\u2019t wait to get started moving to HTTPS. HTTPS is <a href=\"https:\/\/www.youtube.com\/watch?v=e6DUrH56g14\">easier and cheaper than ever before<\/a>, and enables both the <a href=\"https:\/\/istlsfastyet.com\/\">best<\/a> <a href=\"https:\/\/www.httpvshttps.com\/\">performance<\/a> the web offers and\u00a0<a href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/API\/Navigator\/getUserMedia\">powerful<\/a> <a href=\"http:\/\/www.html5rocks.com\/en\/tutorials\/service-worker\/introduction\/\">new<\/a> <a href=\"https:\/\/www.chromium.org\/Home\/chromium-security\/deprecating-powerful-features-on-insecure-origins\">features<\/a> that are too sensitive for HTTP,\u201d Chrome\u2019s Emily Schechter wrote in a post announcing the changes.<\/p>\n<p style=\"text-align: justify;\">Google, which runs Chrome, isn\u2019t the only company leaning on websites to make their connections more secure. Apple said earlier this year that it would require app developers to force HTTPS connections for iOS apps by the end of 2016, and Facebook\u2019s Instant Articles are served over HTTPS, automatically adding security for readers even if they wouldn\u2019t get it on the publication\u2019s own website. Pressure from some of the world\u2019s biggest tech companies will undoubtedly push security forward for millions of people.<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Google recently announced that from January 2017 onwards chrome browser will start warning users about websites using insecure HTTP connections to transmit passwords and credit card data as insecure, as part of a long-term plan to mark all HTTP sites&#8230; <a class=\"more-link\" href=\"https:\/\/codecrunch.co\/blog\/is-http-is-bleeding-to-death-chrome-helps-killing-it\/\">Continue Reading &rarr;<\/a><\/p>\n","protected":false},"author":1,"featured_media":146,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1,13],"tags":[65,60,62,66,61,63,64],"_links":{"self":[{"href":"https:\/\/codecrunch.co\/blog\/wp-json\/wp\/v2\/posts\/138"}],"collection":[{"href":"https:\/\/codecrunch.co\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/codecrunch.co\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/codecrunch.co\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/codecrunch.co\/blog\/wp-json\/wp\/v2\/comments?post=138"}],"version-history":[{"count":4,"href":"https:\/\/codecrunch.co\/blog\/wp-json\/wp\/v2\/posts\/138\/revisions"}],"predecessor-version":[{"id":144,"href":"https:\/\/codecrunch.co\/blog\/wp-json\/wp\/v2\/posts\/138\/revisions\/144"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/codecrunch.co\/blog\/wp-json\/wp\/v2\/media\/146"}],"wp:attachment":[{"href":"https:\/\/codecrunch.co\/blog\/wp-json\/wp\/v2\/media?parent=138"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/codecrunch.co\/blog\/wp-json\/wp\/v2\/categories?post=138"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/codecrunch.co\/blog\/wp-json\/wp\/v2\/tags?post=138"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}