When browsing the web on Google Chrome, everyone sees it and takes it very seriously: the message on the address bar that shows whether a site is secure or not. Whenever I encounter this, I am quite hesitant to further browse the website, but I never knew what the actual implications were, therefore I researched this phenomenon. It turns out, this message is linked to an SSL-certificate. When a domain name owns it, the site is considered secure by Google. SSL stands for Secure Sockets Layer. The normal HTTP (the application protocol) will turn into HTTPS, which actually only implies that the ‘S’ for secure is added. This secures a connection between the browser on the one hand and the web server on the other hand. This ensures that sensitive data transactions are secure, which is especially important when a site handles credit card payments or login data. An SSL-certificate can easily be purchased, usually at a low cost, with the only condititon that it is bought from a trusted vendor.
Even though it is relatively easy to acquire an SSL-certificate, many websites still do not own a certificate, which is why Google took action. In its latest Google Chrome update, companies without an SSL-certificate now get ‘punished’. Instead of a small notification saying ‘not secure’, soon all websites that are not secure will have an ugly red label in the address bar, with the intention of scaring off users into sharing sensitive data on these sites.
From a business perspective, this is a very extraordinary move by Google, since this normally would be the responsibility of a governmental data security institution. Is Google losing track of its true strategy or does it still contribute to Google’s ideals and values? I would love to hear your opinions on this!
Sources:
https://www.globalsign.com/en/ssl-information-center/what-is-an-ssl-certificate/
https://www.thesun.co.uk/tech/7495147/google-chrome-update-websites-warning/