SEOClerks

Clear
Sign In Join

Google to Publicly Shame Websites that don't use SSL in Chrome

  • idealmike Level X3
    • 9

    Write the reason you're deleting this FAQ

    Google to Publicly Shame Websites that don't use SSL in Chrome

    In an attempt to make the Internet a safer place for its Chrome browser users, Google is going to start marking websites that receive and transmit sensitive data but don't use SSL encryption as insecure. They're doing this in a move to get more website owners to start using SSL on their site. So you better watch out if your website does receive/send sensitive data but isn't using SSL and start thinking about installing it otherwise it could have a serious effect on your rankings, traffic and business!

    No they aren't going to parade you around wearing stocks so you can get rotten tomatoes thrown at you. But they will mark your website as "Non Secure" to any users that visit it in Chrome. But only if they know that website is one that receives/sends sensitive data and isn't using SSL to let users know that their details might not be safe when they use it. So if you're not yet using the HTTPS protocol and you do collect/transmit sensitive data then now is the time to get on and install it on your site!
    Google to Publicly Shame Websites that don
    By implementing SSL on your site, your users data will be encrypted and kept some what safe when entering credit/debit card details, names and addresses etc into your site. And by doing so Google wont label your site as insecure. HTTPS is much more secure than just HTTP and there isn't any performance or speed lost when it's correctly set up and configured so there's no reason really any website that does receive and submit sensitive data should not be using it. It's thought that eventually Google are going to start labeling all websites as insecure if they aren't using SSL regardless to whether they do receive and submit sensitive data or not.Google's Chrome security team member Emily Schechter said on Google’s Online Security Blog that

    "Our plan to label HTTP sites more clearly and accurately as non-secure will take place in gradual steps, based on increasingly stringent criteria. Starting January 2017, Chrome 56 will label HTTP pages with password or credit card form fields as ‘not secure,’ given their particularly sensitive nature."

    Does SSL Really Make Your Site More Secure?

    SSL certificates can offer some protection to the user and their protection is guaranteed by the seal of whatever SSL certificate provider you use. Installing SSL on your site and adding the Trust Guard Security Seal to your site can give your users a little more confidence and also you are covered and protected should their details somehow become intercepted and unencrypted. After all, that's what you pay for!

    But having an SSL certificate and using HTTPS on your site can protect transactions they don't protect your site from actually being hacked. To help with that and to prevent it from happening you can use a service like Trust Guard who will scan your site for around 75,500+ known vulnerabilities used by hackers to hack into and access your customers and companies sensitive data that may be stored on your server somewhere. Also it comes with some compensation if you are hacked which again, is what you are paying for should you go that route.

    Replacing the Green Tick Icon

    Up to now, one way that Google would let Chrome users know if a site is safe to use or not is by relying on user feedback. Safe sites got a green tick to let people know the site was safe and used SSL to encrypt and protect their sensitive data.
    Google to Publicly Shame Websites that don
    But apparently that indicator had not worked very well in the past and doesn't always highlight just how insecure a website is that is not using SSL. Most people don't even understand what the difference between HTTP and HTTPS means and don't look for the padlock icon in the address bar or realize that a site without one isn't a safe site to use to make purchases on using credit/debit card details. This has meant people have been the victim of fraud.

    It's because of this that Google are trying to do more to make people realize the dangers and are now explicitly marking sites not secure even if you are visiting that site in an incognito tab. And in future, other later releases of Chrome will extend these non SSL/HTTPS warnings by showing a red triangle to let people know it's not secure and safe to use or working as they should be.

    It's much harder for secured HTTPS encrypted connections to be intercepted and unencrypted in comparison to standard HTTP connections. Of course it doesn't offer complete and total protection. In another recent cyber security article this month we saw how SSL encrypted connections can be sniffed, intercepted and unencrypted on the fly by people with the right knowledge and tools and this information is becoming increasingly more available to anyone determined enough to find out how to do it.

    What do you think about this move by Google?

    Do you think some sites could become unfairly given a red triangle?

    Should all websites use HTTPS/SSL even if they don't receive/transmit sensitive data?

    #Google #Ssl #Https #Chrome Technology & Internet
    Share post:

    Comments

    Please login or sign up to leave a comment

    Join
    Everett

    Everett

    Mozilla Firefox sometimes doesn't let you even view the website if they don't have a correctly configured SSL Certificate. Also, you can add an exception with Mozilla Firefox, which probably is not safe, but one way to bypass their warning. With Google Chrome, I would be pretty annoyed if they were to say that my website isn't secure. I mean how exactly would they know if my website wasn't secure even though I don't make use of the SSL Certificates because the cost for them is outrageous! If there was a supplier that offered SSL Certificates for a cheap price, than yes I would probably buy one, but the issue is, most of them are expensive, like over $20, last time I checked. Probably there is a sales for them, but I always seem to always miss the sales that are going on. Another thing is, you have to renew them each year I believe and if you already have a $10 domain, plus an SSL Certificate that is an easy $30 per year. Yeah, I don't like to pay that much for a website domain, and an SSL certificate. If there was a bundle for about $15 for both yes I would pay it, gladly. Google don't shame me please, that's rude!
    10 years ago

    Are you sure you want to delete this post?

    Lynne

    Lynne

    Yes I've encountered this before Everett where I could not view websites that appeared unsafe. I found it really annoying because there were some websites I just couldn't access Google to Publicly Shame Websites that don
    10 years ago

    Are you sure you want to delete this post?

    procoder

    procoder

    Well it seems that Google is trying to make the web more secure for its users, now talking honestly this it's not good or bad because everything has its cons and pros... So they want to label http sites as unsecure , and https as secure sites, just because the site is being served over https connection it does not mean that the site is safe and is providing a safe content to users, for example, if a website is a "ghost" page that is trying to scam people it will scam people with or without having ssl certificate installed on the server.

    Furthermore this update will make things even more worse than they are, because marking a website as secure while it could be a malware page using https it's not something that will help people or protect them. Making people feel safe , and protecting them are two different things.

    Now I'm not saying that SSL shouldn't be installed, because most of hosting companies are offering it for free if you purchase a hosting plan or an other package from their service, also it can be installed very easy and it can be done by anyone.


    The only thing that I know is that this update will cause a lot of problems to some sites, specially if they are using many http sources.However, switching them to https it's not that hard and at least they have 3 months to do that.
    10 years ago

    Are you sure you want to delete this post?

    Lynne

    Lynne

    Wow, this is a big move for sure. I guess though that this will make everything a lot more secure and safe for online buyers. I know for my personally I get a little nervous whipping out my credit card to buy things online.

    I'll be honest I didn't know that was what https meant LOL. So yes I am learning something new on this website every single day!

    How will this impact backlinks to your website if the backlink is to http and then you change to https? Will people still find their way to the website?

    How does this impact websites that use Paypal and not debit and credit cards?

    Surely this won't impact my blogs in any way since I don't receive payments on my websites right?

    I have just bought a new domain and I am wanting to put up a classifieds website on that domain soon, well maybe next year... like when I find the time! I was wanting to accept payments via Paypal. so should I get an SSL certificate for that site?
    10 years ago

    Are you sure you want to delete this post?

    Cristian

    Cristian

    Jesus that is a big move from Google! It will affect a lot of website and online store since people are so sensitive about seeing "not secured" on a website.
    I do believe everyone should switch to HTTPS, especially online store, it's just a MUST from every point of view, including ranking well in Google. But actually, shaming a simple content based blog is taking things a bit too far in my opinion.

    So there you have it, go on and buy a SSL even if you have a content-based blog, it will save you a lot of trouble the following years.
    10 years ago

    Are you sure you want to delete this post?

    idealmike

    idealmike

    Yeah, well it's not really shaming in the sense that they are pointing a finger to you and down talking you for doing something wrong or publicly flagging you in the stocks like they used to in Medieval times haha but I agree with you it does seem overkill to mark a site with a red triangle simply because it doesn't use SSL. But then on the other side of the coin, you have to ask, if that site is receiving/submitting sensitive data like names, addresses, payment details etc then why isn't it using SSL when it's so important to protect your users. But like also, where do they draw the line you know? How do they know whether a site receives/transmits data like that or not? What about a simple contact form like so many sites have. Should that site have SSL? Should it be marked with a red triangle if it doesn't? So yeah it's a bold, brash move kinda like putting your opponent in check in chess and forcing them to move or accept the next move will be your queen. But hey if it makes the web a safer place then perhaps it's the way forward today anyway?
    10 years ago

    Are you sure you want to delete this post?

    overcast

    overcast

    I have used Let's encrypt on my website. And though it should show the full SSL. But the case is that some of the SSL features are not fullly activated. And chrome complains about that in the URL bar. So i am just wondering what are some things that we are forced to do in such case to make use of the SSL. WordPress based sites can easily make use of the SSL but requires some tweaking.
    9 years ago

    Are you sure you want to delete this post?

    vinaya

    vinaya

    If that happens it will take a toll on my websites. I have half a dozen websites running and none of them uses SSL certificates. Since I am just starting out, having certificates will be a financial burden. Therefore, I have not considered using SSL. By the way I hear that you can also get free SSL. However, I am yet to try this.
    9 years ago

    Are you sure you want to delete this post?

    Corzhens

    Corzhens

    Pardon me if I didn’t fully understand what an SSL is. But I sometimes have an issue with the Chrome browser when it wouldn’t open a site by saying cannot find a secure connection or something like that. What I would do is to run Firefox for that website and more often than not, I could open that website. That’s why I have a backup browser in Firefox. It will let me know if the problem is the website itself or just the browser.
    8 years ago

    Are you sure you want to delete this post?

    Order Now
    Process Time: 0.60870313644409

    Possible Duplicate queries found!
    MatchCountSQLScript
    SELECT * FROM members_ledger WHERE ip = ? AND added>=unix_timestamp(NOW())-864001SELECT querystring, added FROM members_ledger WHERE ip = ? AND added>=unix_timestamp(NOW())-86400

    		/opt/clerks-staging/docroot/include/functions/includes/security.php 398 fetchMemberLedger() include_once()

    SELECT * FROM `questions` as q JOIN categories_faq as c ON q.catid=c.CATID WHERE (q.status=1 OR (q.status=2 AND userid='') ) AND q.quesid='20013'1SELECT q.*, c.seo as CatSEO, c.name as CatName, c.parentid FROM `questions` as q JOIN categories_faq as c ON q.catid=c.CATID WHERE (q.status=1 OR (q.status=2 AND userid='') ) AND q.quesid='20013'

    		/opt/clerks-staging/docroot/viewfaq.php 496 () ()

    SELECT * FROM seoclerks.members WHERE USERID='272'1SELECT * FROM seoclerks.members WHERE USERID='272'

    		/opt/clerks-staging/docroot/include/functions/includes/member.php 445 GetAllUserDetails() ()

    SELECT * FROM categories_faq WHERE CATID='55'1SELECT CATID, seo, name, metatitle, h2header, metakeywords, metadescription, metaheader, parentid, image_name FROM categories_faq WHERE CATID='55'

    		/opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() GetCategorySeoFromType()

    SELECT * FROM seoclerks.members WHERE USERID=2721SELECT googleplus_profile FROM seoclerks.members WHERE USERID=272

    		/opt/clerks-staging/docroot/include/functions/main.php 16914 GetGooglePlusProfileFromId() ()

    SELECT * FROM ratings_faq as r, seoclerks.members as m WHERE r.USERID=m.USERID AND r.upvote=1 AND r.PID=20013 LIMIT 51SELECT m.username FROM ratings_faq as r, seoclerks.members as m WHERE r.USERID=m.USERID AND r.upvote=1 AND r.PID=20013 LIMIT 5

    		/opt/clerks-staging/docroot/include/functions/main.php 17159 GetVoters() ()

    SELECT * FROM answers a, seoclerks.members b WHERE a.quesid='20013' AND a.userid=b.USERID and b.status='1' AND a.status=1 ORDER BY a.combined_votes DESC, a.date_answered asc1SELECT a.answer, a.USERID, a.upvotes, a.downvotes, a.ansid, a.parentid, a.combined_votes, a.date_answered, b.username, b.userlevel, b.profilepicture FROM answers a, seoclerks.members b WHERE a.quesid='20013' AND a.userid=b.USERID and b.status='1' AND a.status=1 ORDER BY a.combined_votes DESC, a.date_answered asc

    		/opt/clerks-staging/docroot/viewfaq.php 1245 () ()

    SELECT * FROM ratings_faqanswers as r, seoclerks.members as m WHERE r.USERID=m.USERID AND r.upvote=1 AND r.PID=109290 LIMIT 51SELECT m.username FROM ratings_faqanswers as r, seoclerks.members as m WHERE r.USERID=m.USERID AND r.upvote=1 AND r.PID=109290 LIMIT 5

    		/opt/clerks-staging/docroot/include/functions/main.php 17159 GetVoters() ()

    SELECT * FROM ratings_faqanswers as r, seoclerks.members as m WHERE r.USERID=m.USERID AND r.upvote=1 AND r.PID=109344 LIMIT 51SELECT m.username FROM ratings_faqanswers as r, seoclerks.members as m WHERE r.USERID=m.USERID AND r.upvote=1 AND r.PID=109344 LIMIT 5

    		/opt/clerks-staging/docroot/include/functions/main.php 17159 GetVoters() ()

    SELECT * FROM ratings_faqanswers as r, seoclerks.members as m WHERE r.USERID=m.USERID AND r.upvote=1 AND r.PID=109237 LIMIT 51SELECT m.username FROM ratings_faqanswers as r, seoclerks.members as m WHERE r.USERID=m.USERID AND r.upvote=1 AND r.PID=109237 LIMIT 5

    		/opt/clerks-staging/docroot/include/functions/main.php 17159 GetVoters() ()

    SELECT * FROM ratings_faqanswers as r, seoclerks.members as m WHERE r.USERID=m.USERID AND r.upvote=1 AND r.PID=109276 LIMIT 51SELECT m.username FROM ratings_faqanswers as r, seoclerks.members as m WHERE r.USERID=m.USERID AND r.upvote=1 AND r.PID=109276 LIMIT 5

    		/opt/clerks-staging/docroot/include/functions/main.php 17159 GetVoters() ()

    SELECT * FROM ratings_faqanswers as r, seoclerks.members as m WHERE r.USERID=m.USERID AND r.upvote=1 AND r.PID=109715 LIMIT 51SELECT m.username FROM ratings_faqanswers as r, seoclerks.members as m WHERE r.USERID=m.USERID AND r.upvote=1 AND r.PID=109715 LIMIT 5

    		/opt/clerks-staging/docroot/include/functions/main.php 17159 GetVoters() ()

    SELECT * FROM ratings_faqanswers as r, seoclerks.members as m WHERE r.USERID=m.USERID AND r.upvote=1 AND r.PID=109717 LIMIT 51SELECT m.username FROM ratings_faqanswers as r, seoclerks.members as m WHERE r.USERID=m.USERID AND r.upvote=1 AND r.PID=109717 LIMIT 5

    		/opt/clerks-staging/docroot/include/functions/main.php 17159 GetVoters() ()

    SELECT * FROM ratings_faqanswers as r, seoclerks.members as m WHERE r.USERID=m.USERID AND r.upvote=1 AND r.PID=120196 LIMIT 51SELECT m.username FROM ratings_faqanswers as r, seoclerks.members as m WHERE r.USERID=m.USERID AND r.upvote=1 AND r.PID=120196 LIMIT 5

    		/opt/clerks-staging/docroot/include/functions/main.php 17159 GetVoters() ()

    SELECT * FROM ratings_faqanswers as r, seoclerks.members as m WHERE r.USERID=m.USERID AND r.upvote=1 AND r.PID=129896 LIMIT 51SELECT m.username FROM ratings_faqanswers as r, seoclerks.members as m WHERE r.USERID=m.USERID AND r.upvote=1 AND r.PID=129896 LIMIT 5

    		/opt/clerks-staging/docroot/include/functions/main.php 17159 GetVoters() ()

    SELECT * FROM ratings_faqanswers as r, seoclerks.members as m WHERE r.USERID=m.USERID AND r.upvote=1 AND r.PID=149652 LIMIT 51SELECT m.username FROM ratings_faqanswers as r, seoclerks.members as m WHERE r.USERID=m.USERID AND r.upvote=1 AND r.PID=149652 LIMIT 5

    		/opt/clerks-staging/docroot/include/functions/main.php 17159 GetVoters() ()

    UPDATE questions SET total_views = total_views + 1 WHERE quesid='20013'1UPDATE questions SET total_views = total_views + 1 WHERE quesid='20013'

    		/opt/clerks-staging/docroot/include/functions/main.php 1765 update_Faqviewcount() ()

    SELECT * FROM questions WHERE quesid!='20013' AND status='1' AND (question like '%Google Publicly Shame Websites SSL Chrome%' OR question like '%Google%' OR question like '%Publicly%' OR question like '%Shame%' OR question like '%Websites%' OR question like '%Chrome%') -- ORDER BY RAND() LIMIT 151SELECT quesid, question, seo, userid FROM questions WHERE quesid!='20013' AND status='1' AND (question like '%Google Publicly Shame Websites SSL Chrome%' OR question like '%Google%' OR question like '%Publicly%' OR question like '%Shame%' OR question like '%Websites%' OR question like '%Chrome%') -- ORDER BY RAND() LIMIT 15

    		/opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() ()

    SELECT * FROM seoclerks.members WHERE USERID='231' limit 11SELECT profilepicture FROM seoclerks.members WHERE USERID='231' limit 1

    		/opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() insert_get_member_profilepicture()

    SELECT * FROM seoclerks.members WHERE USERID='1323' limit 11SELECT profilepicture FROM seoclerks.members WHERE USERID='1323' limit 1

    		/opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() insert_get_member_profilepicture()

    SELECT * FROM seoclerks.members WHERE USERID='1129' limit 11SELECT profilepicture FROM seoclerks.members WHERE USERID='1129' limit 1

    		/opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() insert_get_member_profilepicture()

    SELECT * FROM members_ledger WHERE script='/opt/clerks-staging/docroot/viewfaq.php' AND querystring LIKE '%id=20013%' AND added>=UNIX_TIMESTAMP(NOW())-1200 GROUP BY USERID 1SELECT USERID, username FROM members_ledger WHERE script='/opt/clerks-staging/docroot/viewfaq.php' AND querystring LIKE '%id=20013%' AND added>=UNIX_TIMESTAMP(NOW())-1200 GROUP BY USERID

    		/opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() ()

    SELECT * FROM categories1SELECT * FROM categories

    		/opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() parseRedundantQueriesCache()

    select * from categories_software order by name asc1select * from categories_software order by name asc

    		/opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() insert_GetSoftwareCategories()

    select * from categories_wanttobuy order by name asc1select * from categories_wanttobuy order by name asc

    		/opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() insert_get_wantcategories()

    select * from categories_wanttotrade order by name asc1select * from categories_wanttotrade order by name asc

    		/opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() insert_get_tradecategories()

    SELECT * FROM seoclerks.members WHERE USERID='2951.jpg'1SELECT profilepicture FROM seoclerks.members WHERE USERID='2951.jpg'

    		/opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() getUserProfileImage()

    SELECT * FROM seoclerks.members WHERE USERID='306632.jpg'1SELECT profilepicture FROM seoclerks.members WHERE USERID='306632.jpg'

    		/opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() getUserProfileImage()

    SELECT * FROM seoclerks.members WHERE USERID='377074.png'1SELECT profilepicture FROM seoclerks.members WHERE USERID='377074.png'

    		/opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() getUserProfileImage()

    SELECT * FROM seoclerks.members WHERE USERID='134.png'1SELECT profilepicture FROM seoclerks.members WHERE USERID='134.png'

    		/opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() getUserProfileImage()

    SELECT * FROM seoclerks.members WHERE USERID='272.jpg'1SELECT profilepicture FROM seoclerks.members WHERE USERID='272.jpg'

    		/opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() getUserProfileImage()

    SELECT * FROM seoclerks.members WHERE USERID='589438.jpg'1SELECT profilepicture FROM seoclerks.members WHERE USERID='589438.jpg'

    		/opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() getUserProfileImage()

    SELECT * FROM seoclerks.members WHERE USERID='585810.jpg'1SELECT profilepicture FROM seoclerks.members WHERE USERID='585810.jpg'

    		/opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() getUserProfileImage()

    SELECT * FROM seoclerks.members WHERE USERID='600657.jpg'1SELECT profilepicture FROM seoclerks.members WHERE USERID='600657.jpg'

    		/opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() getUserProfileImage()

    select * from categories_faq order by name asc1select * from categories_faq order by name asc

    		/opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() insert_GetFaqCategories()

    Invalid SQL

    count(*)sql1error_msg

    Expensive SQL

    Tuning the following SQL could reduce the server load substantially
    LoadCountSQLMaxMin

    Suspicious SQL

    The following SQL have high average execution times
    Avg TimeCountSQLMaxMin
    0.1100381SELECT * FROM members WHERE show_freelancer = 1 AND status = 1 AND total_recommendations > 0 AND (skills LIKE '%uniq%') ORDER BY total_recommendations desc LIMIT 0,400.1100380.110038
    0.0580141SELECT `value`, `last_checked` FROM query_cache WHERE query= ? LIMIT 1 0.0580140.058014