Google has updated Chrome to require user permission before connecting to insecure HTTP sites, following its introduction for users of Safe Browsing’s Enhanced Protection mode.

Earlier attacks and coverage

No earlier related attack in our archive yet.

Business impact

This update aims to protect users from malware, phishing, and eavesdropping by ensuring they are aware of insecure connections before data is exposed.

Industries affected

All industries, as this update affects the browsing experience of all Chrome users.

Users affected

Users will be prompted to allow insecure HTTP connections for the first time they visit a site, with subsequent visits not requiring further permission unless the user has not visited the site in over two weeks.

Sources