Date when HTTP traffic will be marked as insecure?

[Max Faxälv]

The Chrome Development team have already put forward a proposal but there doesn't seem to be a date decided.

https://www.chromium.org/Home/chromium-security/marking-http-as-non-secure

Is there any information on when a date will be set or ther updates regarding this topic?

Kind Regards,

Max

[Ramesh Srigiriraju]

Max,

I don't have any updates on this proposal, but it raises some interesting questions.  Why are they just focusing on HTTP?

If Chrome supports other application-layer protocols, it would have to use a TCP/IP stack, which provides no inherent security.

Do they plan to warn users about that?

--
--
Chromium Discussion mailing list: chromium...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-discuss

---
You received this message because you are subscribed to the Google Groups "Chromium-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-discuss+unsubscribe@chromium.org.

[PhistucK]

Other than FTP, what other application layer protocols are supported by Chrome?

☆PhistucK

[Max Faxälv]

My personal guess on why is because the average user uses only HTTP. It is also the average user who hasn't been properly informed HTTP is heavily insecure and most commonly exploited. I'd say taking into consideration the popularity of HTTP today this is a high-priority topic of discussion.

To unsubscribe from this group and stop receiving emails from it, send an email to chromium-discu...@chromium.org.

[Eric Lawrence]

No further announcement on this topic has been made, but a blog post with updates is being drafted.

[Max Faxälv]

Hello Eric,

OK, thank you for the information.

Eagerly looking forward to read it. :)

Have a nice day!

Max

[Kien Nguyen]

Hello guys,

Is there any news about the exact release date of this?

[PhistucK]

Nope. The changes was not announced.

They announced marking HTTP as insecure only when you fill sensitive forms.

https://blog.chromium.org/2016/09/moving-towards-more-secure-web.html

There is no exact release date (there is an estimation for the beginning of the distribution) and the release will be gradual, as always.

☆PhistucK

--

--
Chromium Discussion mailing list: chromium...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-discuss

---
You received this message because you are subscribed to the Google Groups "Chromium-discuss" group.

To unsubscribe from this group and stop receiving emails from it, send an email to chromium-discuss+unsubscribe@chromium.org.