83

Chrome 68 new security feature

I absolutely love the new feature which is showing:

Not Secure - grey

on all non-HTTPS sites as of Chrome version 68.

Though, I would like it in red color for my mother to see clearly whether she is shopping on an at least communication secured site.

Do I have such option somewhere?

  • 8
    Worth noting that this will be the eventual default behaviour: security.googleblog.com/2016/09/… – RedRiderX Jul 25 '18 at 15:11
  • 46
    Give the continued pervasiveness of non-HTTPS sites, don’t you fear that the high false-positive rate will numb your non-tech-y mother, training her to ignore the warning sign? Imagine every intersection had “STOP” signs. People would learn quickly to ignore them (this is altogether non-hypothetical). – Konrad Rudolph Jul 25 '18 at 15:36
  • 3
    It would be nice if it could be yellow instead of red. While I am of the opinion that "if it's on the wire it should be encrypted", a non-https site isn't automatically insecure, it's just not encrypted. If you're doing nothing but looking at stuff then you're not risking anything. – Petro Jul 25 '18 at 15:41
  • 4
    @KonradRudolph I told her literally, don't buy anything on the "red" shops and don't enter any sensitive information there, otherwise their Ok for weather forecasting and such normal things. – LinuxSecurityFreak Jul 25 '18 at 15:47
  • 4
    @Petro: If that were true, every major browser wouldn't be moving towards this model! You're still vulnerable to injection attacks from your gateway or ISP over http, never mind other users of the same network. ISP-level injection in particular happens a lot on some networks. – Phoshi Jul 26 '18 at 12:47
127

Yes, we do have that option


Result

The result being all non-HTTPS pages in red color:

enter image description here


Setting it up

Access internal settings:

chrome://flags/

Look for:

Mark non-secure origins as non-secure

or use this direct link (thanks to Baptiste Candellier):

chrome://flags#enable-mark-http-as

And set it to:

Enabled (mark as actively dangerous)

HTTP in red color

  • 1
    Warning: Upgrading to Chrome 68 deleted all my cookies and messed up some extensions. Make a backup of your profile if you care and want to try this feature. – Mehrdad Jul 27 '18 at 8:44
  • @Mehrdad I appreciate the warning. Although, I would like to ask you to delete that comment. The reason being, that it is not really directly related to my post. Additionally, now in the late October, it is a bit outdated. Thank you. – LinuxSecurityFreak Oct 20 '18 at 3:54

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.