Google Chrome has released version 56 of their browser and it’s knuckling down on internet security. It’s making it clear that having a site using HTTPS is now more important than ever.
As part of Google’s mission for a safer and more secure internet, version 56 will mark all HTTP pages which collect passwords or credit card details as non-secure. This will be indicated on the left hand side of the address bar.
This is part of Google’s longer term plans to mark all HTTP sites as non-secure.
What is HTTPS?
HTTPS stands for Hyper Text Transfer Protocol Secure. It is the secure version of HTTP, the protocol over which data is sent between your browser and the website that you are connected to. The ‘S’ at the end of HTTPS stands for ‘Secure’. It means all communications between your browser and the website are encrypted. HTTPS is often used to protect highly confidential online transactions like online banking and online shopping order forms
How to ensure your site is secured with HTTPS
Google has a great guide on securing your website with HTTPS, but firstly you’ll need to obtain a security certificate as a part of enabling HTTPS for your site.
The certificate first needs to be issued by a certificate authority (CA). The CA will then take steps to verify that your web address actually belongs to your organisation, thus protecting your customers from man-in-the-middle attacks.
When setting up your certificate, ensure a high level of security by choosing a 2048-bit key. If you already have a certificate with a weaker key (1024-bit), upgrade it to 2048 bits.
If some of these concepts are hard to wrap your head around, contact your web host, web developer or SSL certificate reseller and ask them for technical assistance in the installation and configuration of an SSL certificate for your website.
This is a great move by Google. As Chrome has over 1 billion users, it will essentially force end users and the web community to create and maintain more secure websites. Over time this will lead to a safer and more secure browser experience online for all.