Google Chrome & HTTP content : Which impacts for my BRIDGE Store Locator ?

The main goal of this article is to alert & inform you on the new Google Chrome versions and their Security engagement, insisting on the HTTPS instead of HTTP.

You must already know the famous red message on your url address from your browser informing the user a website is not secure. Well this message is still appearing if your website is over HTTP. But this is not the only thing. From new Google Chrome versions, Chrome will upload a website over HTTPS faster than a website over HTTP.

For further information, please have a look on this Googleblog article here.

What you need to remember :

Google Chrome warns about forms with mixed content.

Web forms that load over HTTPS but submit their content over HTTP (unsecured) pose a potential privacy risk to users.

• Chrome 85 displays a warning on these forms, indicating to the user that the form is not secure.
• Chrome 87 displays an interstitial warning when submitting the form, which stops any data transmission, and the user can choose to continue or cancel the submission.
  Previously planned for Chrome 86, this change has been delayed and is now available in Chrome 87.

To know the version of your Google Chrome browser, Click on this url or paste it in your Google Chrome browser: chrome://settings/help

Chrome 88 blocks unsafe downloads from secure pages

From Chrome version 88 onwards, downloads from an unsecured source will no longer be allowed on secure pages. The change will be subject to progressive deployment and concerns different types of files.

Find here the Google Chrome roadmap.

Thus, at the present time :

-Version 87 of Google Chrome is already stable in production since 17 November 2020.

-Version 88 has been stable in production since 19 January 2021.

Summary

- If you have HTTP content, consider replacing it with HTTPS content if you wish to secure your Store Locator.

- If you wish to upgrade your Store Locator from HTTP to HTTPS, please contact your BRIDGE support team, who will be able to help you with this process.

All links, scripts, iframes, dynamic Header/footer content in HTTP must be called in HTTPS in order to securely call them on recent versions of Google Chrome. So remember to make sure that the content of your website(s) is also over HTTPS!

We wish you a nice day with BRIDGE by SOLOCAL.