HTTPS Or Bust!
Are you tired of people downloading random files from the internet, running them and then complaining to you about how it isn’t their fault the machine is now infected with something nasty? The new Chrome update won’t completely fix that but it will make it harder for them to download nasty files as Chrome will soon block all downloads from insecure sites. That won’t stop someone from uploading viral materials to an HTTPS site for the click happy to run but it will stop man in the middle attacks which intercept an unencrypted connection and replace an innocent file with a trojan infested one.
The Register details how the rollout will go, starting with warnings for users and eventually an outright block, as well as a way to set it back the way it was for those who can’t live without downloading random unencrypted files here. The updates will hit Linux, macOS, and Windows machines first, with a month delay for Android and iOS.
Continuing to drop flame retardant on the dumpster fire that is web security, Google on Thursday said it will soon prevent Chrome users from downloading files over insecure, plain old, unencrypted HTTP.