3 ms·
An invalid certificate also doesn't technically stops you and just asks if you really want to proceed. By "soon" I mean that this particular behavior surely wi
by vbezhenar 4y ago
An invalid certificate also doesn't technically stops you and just asks if you really want to proceed.
By "soon" I mean that this particular behavior surely will be the default one. Here's old blog post: https://blog.chromium.org/2021/03/a-safer-default-for-navigation-https.html https://blog.chromium.org/2021/03/a-safer-default-for-naviga...
And quote from it: "HTTPS protects users by encrypting traffic sent over the network, so that sensitive information users enter on websites cannot be intercepted or modified by attackers or eavesdroppers. Chrome is invested in ensuring that HTTPS is the default protocol for the web, and this change is one more step towards ensuring Chrome always uses secure connections by default."
I think that the direction is obvious.
- JohnFen 4y agoAny browser that actively prevents viewing an HTTP site is not fit for purpose. Set secure defaults, absolutely. Show scary warning pages if you insist. But don't prevent legitimate activity entirely.