← Back to release summary

Ask-before-HTTP warning on by default

Category

Security

Type

New or changed feature

Status

Proposed (Chrome Proposed)

Intent stage

None

• Breaking change: No
• Enterprise impact: Low
• Spec maturity: Unknown status

Summary

Chrome now prompts users by default when they access an insecure (HTTP) connection. IT admins can control this default behavior via [HttpsOnlyMode](https://chromeenterprise.google/policies/#HttpsOnlyMode) policy.

Standards & signals

• Firefox: No signal
• Safari: No signal
• Web developers: No signals

Ecosystem

• Web Platform Tests: https://wpt.fyi/results/?q=ask-before-http-warning-on-by-default
• Chrome Platform Showcase: https://chrome-platform-showcase.paulkinlan-ea.deno.net/features
• GenDN reference: https://gendn.paulkinlan-ea.deno.net/features
• chrome.dev demos search: https://www.google.com/search?q=site%3Achrome.dev+Ask-before-HTTP%20warning%20on%20by%20default
• MDN Web Docs: https://developer.mozilla.org/en-US/search?q=Ask-before-HTTP%20warning%20on%20by%20default
• Baseline status: https://webstatus.dev/?q=Ask-before-HTTP%20warning%20on%20by%20default

View on chromestatus.com