Friday, April 28th 2017
Chrome 62 Really Won't Like "HTTP" Sites When In Incognito Mode
As part of Google's push towards a safer, HTTPS-encrypted web, the Chrome browser will begin marking any HTTP site as non-secure when a user browses in incognito mode. Incognito is the Chrome browser's enhanced privacy mode, which goes a long way in explaining why Google sees non-HTTPS sites as a non-secure place to visit. Save some network metadata, encrypted HTTPS connections keep the contents of the communications between the user and a web server hidden from outside parties - in normal circumstances, that is. The company is already marking HTTP web-pages that accept credit card details as not-secure, and starting October this year, the browser will do the same on every HTTP site in which the user has to input data, and for every HTTP page browsed in Incognito mode.
Interestingly, Google has advanced that traffic to pages it has marked "Not Secure" has dropped by 23%, which goes to show that such policies do impact a user's decision on whether or not to establish such a connection. In addition, Google started scrambling its search engine algorithm so as to feature HTTPS sites more prominently than sites that don't. This means that websites that see diminishing visitors should be more inclined towards a adopting the more secure, encrypted HTTPS. And in an era where every scrap of our information is deemed worthy of at least being stored and resold, I find it commendable that Google thinks every piece of information should be secured, instead of just our payment information - which even that isn't always secure.
Sources:
Google Security Blog, Tom's Hardware
Interestingly, Google has advanced that traffic to pages it has marked "Not Secure" has dropped by 23%, which goes to show that such policies do impact a user's decision on whether or not to establish such a connection. In addition, Google started scrambling its search engine algorithm so as to feature HTTPS sites more prominently than sites that don't. This means that websites that see diminishing visitors should be more inclined towards a adopting the more secure, encrypted HTTPS. And in an era where every scrap of our information is deemed worthy of at least being stored and resold, I find it commendable that Google thinks every piece of information should be secured, instead of just our payment information - which even that isn't always secure.
18 Comments on Chrome 62 Really Won't Like "HTTP" Sites When In Incognito Mode
Not leaving my personal GMail account info cached at work
Not having, honestly, anything personal on my machine at work. Since I've had to use my personal Amazon account to order things for the company before, I have no issue with using my lunch hour, or a break, to pull a trigger on something the SO desires, and since some of our work requires us to have a "public face", I get asked to check things from different OSes on facebook, twitter, linkdn, etc. Not going to leave my personal info saved on work PC. And anytime to leave your banking information cached in any shape/form/fashion on any computer, that just leaves it open for scavenging. You can run all the anti-everything you like, but zero-day vulnerabilities exist, and there's always the chance. I like to minimize the damage.Exactly. Several times I have to log into my company email from remote sites to receive patches, links, etc from support and vendors, and I don't want that information left behind in any form: incognito, thank you.
2.) The study was done 4 years ago. All of the major sites that did have the issue have long since fixed it.
I mean, yeah, if you're doing stuff on someone else's computer, or a shared computer, use incognito mode if you want. But there isn't a need to use it on your own computer.
oh lets not start that argument again....
BTW"without permission" is blatantly false
Let's begin with conspiracy theories :rockout:
:rockout:
Most of us use SSDs and you cants wipe free space on an SSD even if you try do to built in OP prevents 100% wiping of free space.
I also take my privacy and data seriously unlike most people. I also run Tails/Tor and use FDE using VEracrypt and containers and other means to protect my stuff like VPNs and such.
Be my guest and give everyone your personal information but i wont give it up without a fight.
Still need to get a faraday cage for my IPass since its a tracking device......there is a reason they dont beep anymore. IL made a tracking network and if you install a beeper in it it goes off every mile or so.
Betteroff with that than chrome.