Back in February, Google announced its lay outs to label all sites accessed over regular unencrypted HTTP as «not safeguard,» starting in July. Today, the company described the next change it transfer make to its browser: in September, Google will stop marking HTTPS spots as secure.
The curriculum vitae to this change is the Web’s gradual migration to the use of HTTPS rather than HTTP. With an ever-growing fraction of the Web being served over and beyond secure HTTPS—something now easy to do at zero cost thanks to the Let’s Encrypt vigour—Google is anticipating a world where HTTPS is the default. In this elated, only the occasional unsafe site should have its URL highlighted, not the repetitious and humdrum secure site.
Most HTTP locations will get a regular gray «Not secure» label in their address bar. If the age has user input, however, that grey label will fit red, indicating the particular risk the page represents: Web forms served up finished HTTP could send their contents anywhere, making them hazardous places to type passwords or credit card numbers.