Google chrome v68 to flag sites without SSL Certificates and https as insecure
Over the course of the last two years, rumors have swirled over Google’s position concerning forcing the move to HTTPS encryption.
Last year, Google began officially warning website owners that non HTTPS sites would incur consumer messaging that identified the site as non-secure.
The exact “when’ and the “how,” however, have eluded site owners up until today.
On February 8th, Google made clear its intentions to formally mark websites lacking SSL Certificates (the certificate which once installed on the website results in an HTTPS secure URL string) as insecure.
Google has confirmed a date of “early July 2018” as the start date. They have also disclosed how they will alert web surfers of the non-HTTPS status, or not secure.
Sites that remain on the HTTP non-secure protocol will be flagged with a warning in the URL bar of the surfer’s browser.
The non-secure flag will be built into the release of Chrome 68, which will be ready for download in early July.
Here’s an example, as posted per Google, of difference in URL optics between HTTP and HTTPS encryption websites:
It is possible that the flag could stand out by use of the color red.
However, that remains an unconfirmed aspect. Officially, the image above represents Google’s current likely change.
Google followed up this by stating that the web’s transition to HTTPS, which is also identified as “making the web safer,” by disclosing numbers supporting HTTPS growth and scale.
” Over 68% of Chrome traffic on both Android and Windows is now protected
” Over 78% of Chrome traffic on both Chrome OS and Mac is now protected
” 81 of the top 100 sites on the web use HTTPS by default
HTTPS encryption growth shows that most site owners are taking Google’s warnings seriously.
However, it remains that a large group of site owners has been less than motivated to make the change.
This adaptive lag is likely a result of confusion over what HTTPS encryption is, the annual cost associated with HTTPS encryption maintenance, and general laziness.
WHAT IS AN SSL CERTIFICATE?
An SSL certificate is a security certificate that once installed on a web server activates a secure connection between the browser the surfer is viewing the content on and the web server that the content is derived from initially.
The website’s URL protocol will change from HTTP to HTTPS. Currently, a security padlock will also be present in the URL as a way to further signal the status of the website’s Google SSL certificate.
SSL certificates help the web cut down on instances of cybercrime that are often performed through security loopholes in web browsers.
If the connection between the surfer’s web browser and web server are not secure through an SSL connection, a moderately skilled hacker could seize information, such as credit card numbers, as it is being typed into a form on an unsecured website.
Why are Google SSL Requirements Important?
- Establishes Trust and Builds Brand Power
- Provides Encryption of Sensitive Information
- Provides Authentication
Non HTTPS sites and Google SEO – Why You Need To Adapt
For site owners who have lagged on adapting their site to HTTPS encryption, time is indeed running out.
SSL Cost – Free Certificates Available
Does google sell ssl certificates? No.
An SSL certificate needed to convert your site to HTTPS can cost around $70 annually. The easiest place to buy one is with your hosting company.
Many hosting companies are taking advantage of this situation and charging ridiculous fees, be wary. Overall, prices have been coming down due to increased demand by consumers.
There are many hosting companies that provide free SSL certificates as a way to earn your business.
For example, WP Engine offers free SSL certificates as part of their regular packages. You just need to shop around.
Final Words About Being Prepared and Staying Secure
Any legitimate ecommerce platforms, shopping carts, and merchant banking processors already expect that websites be secured with SSL/ HTTPS.
Non HTTPS websites will undoubtedly be exposed to the risk of lost search rankings and overall, less traffic.
Sunday, July 1, 2018
