80

Chrome 68 new security feature

I absolutely love the new feature which is showing:

Not Secure - grey

on all non-HTTPS sites as of Chrome version 68.

Though, I would like it in red color for my mother to see clearly whether she is shopping on an at least communication secured site.

Do I have such option somewhere?

9
  • 8
    Worth noting that this will be the eventual default behaviour: security.googleblog.com/2016/09/…
    – RedRiderX
    Jul 25, 2018 at 15:11
  • 46
    Give the continued pervasiveness of non-HTTPS sites, don’t you fear that the high false-positive rate will numb your non-tech-y mother, training her to ignore the warning sign? Imagine every intersection had “STOP” signs. People would learn quickly to ignore them (this is altogether non-hypothetical). Jul 25, 2018 at 15:36
  • 3
    It would be nice if it could be yellow instead of red. While I am of the opinion that "if it's on the wire it should be encrypted", a non-https site isn't automatically insecure, it's just not encrypted. If you're doing nothing but looking at stuff then you're not risking anything.
    – Petro
    Jul 25, 2018 at 15:41
  • 4
    @KonradRudolph I told her literally, don't buy anything on the "red" shops and don't enter any sensitive information there, otherwise their Ok for weather forecasting and such normal things. Jul 25, 2018 at 15:47
  • 4
    @Petro: If that were true, every major browser wouldn't be moving towards this model! You're still vulnerable to injection attacks from your gateway or ISP over http, never mind other users of the same network. ISP-level injection in particular happens a lot on some networks.
    – Phoshi
    Jul 26, 2018 at 12:47

1 Answer 1

124

Yes, we do have that option


Result

The result being all non-HTTPS pages in red color:

enter image description here


Setting it up

Access internal settings:

chrome://flags/

Look for:

Mark non-secure origins as non-secure

or use this direct link (thanks to Baptiste Candellier):

chrome://flags#enable-mark-http-as

And set it to:

Enabled (mark as actively dangerous)

HTTP in red color

1
  • 2
    Warning: Upgrading to Chrome 68 deleted all my cookies and messed up some extensions. Make a backup of your profile if you care and want to try this feature.
    – user541686
    Jul 27, 2018 at 8:44

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .