A decade after the 'Not Secure' roadmap, Chrome will now warn before insecure HTTP

laparisa · x · 2026-10-23

Chrome security engineer laparisa looks back at the 2016 roadmap that marked HTTP as "Not Secure" — complete with a kickoff cake photo. A decade later, HTTPS is the web's default.

The next step: Chrome is now enabling proactive warnings before insecure HTTP connections are even made, instead of badge-warning after the fact.

Related event: Chrome to Actively Block HTTP as HTTPS Marks a Decade(2 posts)→

Original post →

More from Apps

Apps channel →