Google Chrome will begin Blocking web pages, Why does it matter to you?
Google announced that beginning January 2020 Chrome Browser will begin blocking web pages with mixed content. Website owners are urge to checkout is their sites are obey google HyperText Transfer Protocol. This is a good decision from google , it will improve user privacy and security on the web.
So what is a web page with mixed content?
In a mixed content both HTTPS and HTTP contents are loaded and display the same page. Here initial HTML is loaded over a secure HTTPS connection and other resources are loaded over an insecure HTTP connection. Old browsers are not display which type of content in the page contains, but modern browsers display warnings to users that this type of content is not secured.
How these HTTPS sites are beneficial to us ?
We know that when we open some sites it is redirect to some other sites. But HTTPS lets the browser check that it has opened the right site and not redirected to any other sites. HTTPS lets the browser detect if an attacker has changed any data the browser receives. Anyway HTTPS sites are secure to users, in such sites google ensure the data they will enter keep more secure.
What is the difference between HTTPS, TLS and SSL ?
HTTPS stands for HyperText Transfer Protocol Secure. It occurs in the URL when a website is secured by SSL certificate. In HTTPS sites a lock symbol visible on the browser bar. When click on the lock symbol the details of the certificate , the issuing authority and the corporate name of the website owner can be viewed.
SSL is Secure Sockets Layer. It is the technology for keeping an internet connection secure. It prevents third parties read and modify any information transferred from these insecure sites, including potential personal details.
TLS is Transport Layer Security, it is an updated, more secure version of SSL. Transport layer security provided data to be securely exchange through networks. It enables privacy, protection and integrity for the data.
How Google Chrome will handle Mixed content ?
Currently Google loads pages with mixed content. Beginning in December 2019with the introduction of Chrome 79, Google will automatically upgrade HTTP content to HTTPS if that resource exist on HTTPs and Google will introduce a toggle that a Chrome user can use to unblock insecure resources that Chrome is blocking.
It is not a full blocking of all insecure websites. But when a user opens a HTTP page on google it shows some warnings. It causes a bad image in users about the site and they easily skip up to another sites. So the traffics in site might be degraded.
How can fix mixed content?
Firstly you need to install SSL insecure content fixer plugin. You must change the URL from HTTP to HTTPS. Use content security and policy Lighthouse’s mixed content audit to discover and fix mixed content on your site. It is a multi purpose browser that can manage mixed content scale. To enable this feature set the content-security-policy -report-only directive by adding it as response header for your site.
