// Google Chrome Now Flagging Sites Without SSL

Monday, January 30, 2017 | By atomix

A new version of Chrome has just been released, and it’s going to impact the way internet users experience websites that aren’t using HTTPS (SSL). Is your website ready for Google’s war on unencrypted sites?

Google’s announcement is clear: it’s time for unencrypted sites to upgrade*


Google wants everything on the web to be secure. They’ve been on a quest to stamp out the use of non-secure HTTP websites for over a year now. While it may seem like getting your SSL certificate is an inconvenience, ultimately it’s a move that’s going to protect your users’ privacy.


When traffic is unencrypted, not only can eavesdroppers see what you’re doing online, but also intercept and manipulate it. HTTPS sites ensure this doesn’t happen. SSL certificates are small data files that encrypt your data as it’s sent through the internet, effectively preventing other parties getting access to your sensitive information.



And HTTPS protects more than just your customers’ data. It also helps people to easily identify when a site is real and when it’s an imposter. These fake versions of websites are popular with hackers and other malicious users. We can all agree that taking power away from these unpleasant types can only be a good thing!


People are becoming more savvy about their privacy online, and making sure your website reflects a commitment to their security should be a priority. We owe it to our visitors to protect the security, integrity and privacy of their data.


How is this going to affect my website?

If you already have a site-wide SSL certificate installed, well done! Nothing is going to change and you can continue developing your online presence with the knowledge that you’re protecting your users’ privacy.

Image courtesy of the Google Security Blog


On the other hand, now that the changes are live, any website not running SSL will be marked as Not Secure in the address bar. Eventually all website’s running HTTP will display ‘Not Secure’ with a red exclamation mark and triangle next to your URL. In the first stage of the rollout, you’ll only see the words ‘Not Secure’ with the information icon on pages that collect passwords or credit card details, but eventually you’ll see the red marker on all plain HTTP pages.


This has the potential to confuse your visitors into thinking that there are security issues with your website other than being non-HTTPS. Consumers are starting to look for clear signs of high security and the Non Secure mark may discourage someone to choose to use your product or service over that of your competitors.


Image courtesy of the Google Security Blog


Upgrading to SSL will also help to improve your website’s ranking in Google search results. Website performance and security are important factors in how Google calculates your website authority and page rank. HTTPS is a great indicator that you’re taking your visitors’ security seriously, and as a result, HTTPS websites should see better performance in the search results compared to unencrypted sites.


Even without taking the obvious security benefits into consideration, there are other positive reasons to upgrade to SSL:

  • Better website performance
  • It’s easier and cheaper than ever before
  • Access powerful new features that are too sensitive for HTTP


How do I make sure my website is safe?

We recommend setting up SSL on your website as soon as possible to minimise any potential interruptions or issues with a plain HTTP website. Installing SSL is usually a relatively simple task, and you should be able to find a description of how to implement SSL in your hosting provider’s support documentation.


If you’re an existing client of ours, you can request SSL installation by emailing our team. Google also offers setup guides that you can provide to a developer to enable HTTPS on
your servers.


*Read Google’s full announcement on their security blog for more information.

Stay up-to-date with other tech news by subscribing to our monthly newsletter!

We promise to only send you information when it’s genuinely interesting.