{"id":6454,"date":"2018-05-17T17:19:47","date_gmt":"2018-05-17T21:19:47","guid":{"rendered":"https:\/\/www.thesslstore.com\/blog\/?p=6454"},"modified":"2023-04-10T16:51:03","modified_gmt":"2023-04-10T20:51:03","slug":"google-will-remove-the-secure-indicator-in-september","status":"publish","type":"post","link":"https:\/\/www.thesslstore.com\/blog\/google-will-remove-the-secure-indicator-in-september\/","title":{"rendered":"Google will remove the “Secure” indicator in September"},"content":{"rendered":"

Eventually Google plans to remove the padlock icon from its UI, too.<\/h2>\n

In a blog post<\/a> made on Thursday, Google announced that it will be removing the “Secure” indicator from its address bar in September with the release of Chrome 69. This is a move that was desperately needed.<\/p>\n

\n

HTTPS usage on the web has taken off<\/a> as we\u2019ve evolved Chrome security indicators. Later this year, we\u2019ll be taking several more steps along this path. Users should expect that the web is safe by default, and they\u2019ll be warned when there\u2019s an issue. Since we\u2019ll soon start marking<\/a> all HTTP pages as \u201cnot secure\u201d, we\u2019ll step towards removing Chrome\u2019s positive security indicators so that the default unmarked state is secure. Chrome will roll this out over time, starting by removing the \u201cSecure\u201d wording and HTTPS scheme in September 2018 (Chrome 69).<\/p>\n<\/blockquote>\n

As we have stated before, the “Secure” indicator in Google’s UI was never a good idea<\/a>. Though it was well-intentioned, proposed as a way to incentivize switching to HTTPS, it has instead made phishing websites more effective<\/a> by adding a “secure” label in the address bar despite the site’s nefarious nature. Phishing has never been more rampant<\/a>. Now it seems that Google has gotten enough buy-in to remove the indicator, which should help deal a blow to phishers the world over. <\/span><\/p>\n

The new UI will look like this:<\/p>\n

\"Google<\/p>\n

If you’ll notice Google has also eliminated the protocol at the beginning of the URL. It used to start with “https:\/\/…,” that will now be omitted.<\/p>\n

Emily Schecter, a Google Product Manager handling Chrome Security (and one of the authors of today’s Chromium blog post<\/a>), recently gave a keynote that discussed some of the reasons Google has decided to drop the protocol and simplify what it displays in Chrome’s address bar. You can watch it below.<\/p>\n