The secure indicator for web users is now contained in the ‘S’ at the end of HTTPS (Hyper Text Transfer Protocol Secure) at the beginning of the web address.

Over the last 5 years Google has monitored a sharp increase in usage of HTTPS over the former less secure non-encrypted HTTP.

However some security experts warned that those who manage websites may find the the job at their end to update their certificates is a painful one.

‘’Just the task of discovering these and making sure they are upgraded to HTTPS will be a big task and, if done manually, there are likely to be gaps which cause disruption to customers and business processes’’ claimed Craig Stewart, VP of cyber security company Venafi, in a comment to Computer Business Review.

‘’Unless organisations are able to identify where their HTTP certificates are, and then have the flexibility to revoke and replace these with HTTPS certificates, they will be faced with customers, partners and prospects refusing to access a seemingly insecure site.’’

Stewart mirrored the view coming from Google that all websites should just be considered secure “as the de facto standard”.

He added: “It’s those sites that do not use HTTPS that should be brought to our attention so that we do not use them.’’
This article is from the CBROnline archive: some formatting and images may not be present.