CyberSIXT Search
Original

SecurityWeekIonut Arghire

Chrome to Turn HTTPS on by Default for Public Sites

Chrome is set to make HTTPS the default for public sites, with Google stating that from October 2026, when Chrome 154 is projected to arrive, the Always Use Secure Connections setting will be on by default for all users and all public sites. If a user encounters a site that does not use a secure connection, Chrome will display a warning and request explicit permission to navigate, while the aim is to reduce the risk of navigation hijacking, malware exposure, and social engineering.

The changes follow an opt-in phase and testing of the feature, and prior steps included enabling the setting for a subset of users in Chrome 141 and plans to enable it for opt-ins to Enhanced Safe Browsing protections in Chrome 147 in April 2026. Google notes that more than 95% of websites already rely on encrypted connections, and that mixed content handling is being improved to support migration to HTTPS.

Users can disable the warnings or turn off the setting to completely revert to the previous behaviour, according to Google says. Written by Ionut Arghire.

Sources

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device