• RMK Consulting Staff

Firefox, Chrome start calling HTTP connections insecure



Firefox 51, released today, and Chrome 56, currently due for release next week, have started describing some HTTP connections as insecure as they continue the industry-wide push to promote the use of encrypted HTTPS.


How Firefox will alter the address bar for HTTP pages with password forms.

The non-secure labelling will occur on pages delivered over HTTP that include forms. Specifically, pages which include password fields, and in Chrome, credit card fields, will put warnings in the address bar to explicitly indicate that the connection is not secure. One somewhat common older development practice was to place the password field on a page delivered by HTTP, with the form submitted to a location protected by HTTPS. This offers little security in practice, however. Pages delivered by HTTP can be readily modified by eavesdroppers, meaning that an attacker could simply choose to submit the password data to a destination of their choosing, instead of the intended HTTPS location.

The non-secure label should provide stronger encouragement to developers to reduce their use of HTTP and make the switch to HTTPS whenever sensitive data is being handled. Google's approach is arguably a little clearer than Firefox's; where Firefox will use a padlock icon with a red line striking it through to indicate that a connection isn't secure, Chrome will explicitly put "Not secure" in the address bar.

Read 1 remaining paragraphs

#chrome #firefox #ssl #https

0 views

RMK CONSULTING, LLC

RMK Consulting, LLC provides exceptional IT Support Services, Managed IT Services, Cloud Computing Solutions and Phone Systems to businesses across Texas. Our Managed IT Services are designed to Manage and Protect your IT systems so you can focus on your business.

SERVICES

CONTACT

RMK Consulting, LLC

415 N Guadalupe Ste. 165

San Marcos, TX 78666

(512) 761-7652

  • RMK Consulting, LLC on LinkedIN
  • RMK Consulting, LLC on Twitter
  • RMK Consulting, LLC on Facebook
  • RMK Consulting, LLC on YouTube
  • RMK Consulting, LLC on Instagram
  • RMK Consulting, LLC RSS Feed