A Secure Internet: Chrome's Push Towards HTTPS-First Mode

Here at Peakhour, we closely follow industry developments to ensure we're offering the latest in online security. Google Chrome has made a significant move toward ensuring that internet traffic is encrypted and authenticated. Here's an in-depth look at what Chrome has unveiled on August 16, 2023, and how it's paving the way towards HTTPS by default.

1. Automatic Upgrades to HTTPS

Chrome aims to make HTTPS the standard protocol by automatically upgrading all HTTP navigations to HTTPS. Even if you click a link explicitly declaring HTTP, Chrome will attempt to use HTTPS instead. If the upgrade fails due to an invalid certificate or other issues, Chrome will fallback to HTTP.

The change is part of an experiment in Chrome version 115. Although it doesn't provide protection against active network attackers, it's a step towards making HTTPS the default mode for everyone, thus protecting more traffic from passive eavesdroppers.

2. Warning on Insecurely Downloaded Files

Chrome is enhancing security measures by warning users before downloading high-risk files over insecure connections. Downloaded files can contain malicious code that might compromise your computer. These warnings aim to make users aware of the risks involved, although they can still proceed with the download if they accept the risk. The rollout of these warnings is expected to start in mid-September.

3. Expanding HTTPS-First Mode Protections

Chrome's ultimate goal is to enable HTTPS-First Mode for all users. Some key areas where they are expanding these protections include:

Enabling HTTPS-First Mode for users in Google's Advanced Protection Program who are also signed into Chrome.
Planning to enable HTTPS-First Mode by default in Incognito Mode for a more secure browsing experience.
Experimenting with automatically enabling HTTPS-First Mode on sites frequently accessed over HTTPS.
Exploring automatically enabling HTTPS-First Mode for users who rarely use HTTP.

4. Try it Out

For those eager to try out HTTPS upgrading or warnings on insecure downloads before the full rollout, Chrome has provided options within the browser's settings to enable these features.

Peakhour's HTTPS Redirection Feature at the Edge

At Peakhour, we understand the critical importance of web security, particularly the role of HTTPS in ensuring encrypted and authenticated connections. That's why we've implemented an advanced feature that enforces HTTPS by redirection at our edge.

When a user attempts to access a site through HTTP, our edge technology identifies the unsecured connection. Instead of allowing this potentially vulnerable connection, we automatically redirect the request to the HTTPS version of the site.

Enhanced Security: By enforcing HTTPS, we ensure that data transmitted between your website and your users is encrypted and secure from potential attackers.
Compliance with Best Practices: This feature aligns with industry standards and recent browser policies, like Chrome's push towards HTTPS-first mode.
User Trust: Knowing that a connection is secure builds user trust, leading to better user experience and potentially higher conversion rates.

We also offer options for customisation, allowing you to set specific rules and behaviours for how HTTP requests are handled and redirected to HTTPS. Peakhour's HTTPS redirection feature at the edge is more than a security tool; it's a commitment to offering the latest in web protection. By automating the redirection from HTTP to HTTPS, we not only protect your site and users but align with the leading edge of web security practices.

Conclusion

Chrome's commitment to creating a secure-by-default web is a critical step towards the vision of a fully encrypted and authenticated online world. This advancement aligns with Peakhour's mission of ensuring top-tier internet security for our clients.

These changes by Chrome may require adaptation on the part of developers, enterprises, and users. But the end result is a safer and more secure web for everyone. If you are part of an organisation looking to enhance your security, understanding these changes and how to leverage them is essential. Reach out to us at Peakhour, and we can help guide you on the path to a secure digital future.

Chrome HTTPS Internet Security