Slashdot: Google Warns Webmasters About Insecure HTTP Web Forms

Google Warns Webmasters About Insecure HTTP Web Forms
Published on August 19, 2017 at 04:54PM
In April Chrome began marking HTTP pages as “not secure” in its address bar if the pages had password or credit card fields. They’re about to take the next step. An anonymous reader quotes SearchEngineLand:
Last night, Google sent email notifications via Google Search Console to site owners that have forms on web pages over HTTP… Google said, “Beginning in October 2017, Chrome will show the ‘Not secure’ warning in two additional situations: when users enter data on an HTTP page, and on all HTTP pages visited in Incognito mode.”
Google warned in April that “Our plan to label HTTP sites as non-secure is taking place in gradual steps, based on increasingly broad criteria. Since the change in Chrome 56, there has been a 23% reduction in the fraction of navigations to HTTP pages with password or credit card forms on desktop, and we’re ready to take the next steps…”

“Any type of data that users type into websites should not be accessible to others on the network, so starting in version 62 Chrome will show the ‘Not secure’ warning when users type data into HTTP sites.”