Don’t panic, but one of life’s great certainties, change, is coming to Google Chrome. It’s also arriving sooner than you think. Google is making some important security changes in 2017 in order to keep user data safe. The good news is that these changes will make the web safer for everyone, and the less people getting their sensitive data stolen, the better.

Mad Genius, a Certified Google Partner, stays ahead of these changes. We will explain what these updates are and the steps you can take to make sure your business is not affected.

NEW SECURITY CHANGES AT GOOGLE

Google’s Internet browser, Chrome, will begin marking websites using HTTP as non-secure on January 1, 2017. This applies to users browsing using Chrome as their internet browser.

Google is taking steps to create a more secure web. They are concerned about users sending personal information across non-secure websites and the risk for identity theft.

Right now HTTP is not a secure format for transferring sensitive data. Attackers are able to steal information by exploiting these security vulnerabilities. Marking HTTP sites as non-secure will let users know that any information they submit to a marked site is no longer private. This includes email addresses, passwords, physical addresses, search terms, credit card information, and more.

The security solution is to migrate sites from an HTTP address to an HTTPS address.

HTTPS IS NOW THE NEW SECURITY STANDARD

Google outlines what HTTPS is and how it secures the web in their Transparency Report.

HTTPS is a mechanism that allows your browser or app to securely connect with a website. HTTPS is one of the measures to help keep your browsing safe and secure, which is important when you are doing things like logging into your bank’s website or submitting your credit card information to an online store. HTTPS relies on encryption—SSL or TLS—to secure the connection. These web connections protect against eavesdroppers, man-in-the-middle attacks, and hijackers who attempt to spoof a trusted website. In other words, it thwarts interception of your information and ensures the integrity of information that you send and receive.

What is HTTPS?

HTTPS Security Lock - Mad Genius

HTTP—hypertext transfer protocol—is the technical means by which our browsers connect to websites. HTTPS (the “S” is for Secure) is an encrypted HTTP connection, making it more secure. You can tell if your connection to a website is secure if you see HTTPS rather than HTTP in the URL. Most browsers also have an icon that indicates a secure connection—for example, Chrome displays a green lock.

Why should I use HTTPS?

You should protect your website with HTTPS, even if it doesn’t handle sensitive communications. HTTPS protects the integrity of your website and the privacy and security of your users. Also, powerful new web platform features are restricted to sites offering HTTPS.

HOW YOUR WEBSITE WILL BE AFFECTED

Google Chrome is the most popular web browser in use today. More than half of Internet users access websites via Google Chrome. Therefore, this will affect a large percentage of your site’s users.

If you have an HTTP website:

If a user accesses your website through Chrome, and your website has not moved from HTTP to HTTPS, it will be clearly marked as non-secure in the address bar.

HTTP Chrome 53 vs 66 Security - Mad Genius

If you already have an HTTPS website:

Sites hosted on HTTPS experience a number of benefits. HTTPS websites have three layers of protection: Encryption, Data Integrity, and Authentication. Users visiting your site can expect a secure online experience when entering their data. Additionally, your pages will load faster and Google’s indexing system gives your site a small ranking boost.

HOW TO PREPARE

Migrating your site to HTTPS requires purchasing and installing an SSL or TLS certificate. An SSL or TLS certificate is an electronic document that verifies your business identity and allows a web server to establish a secure encryption with a visitor’s web browser.

If your site uses another host, the instructions for migration vary depending on your service. Google offers a site migration guide that should help.

Mad Genius offers HTTPS migration services. We’ll be over with a moving truck, body builders, and enough bubble wrap to handle your fragile files. Reach out to us.