Re:Chrome’s address bar will use https:// by default
by ibejoeb on Tuesday March 23, 2021 @12:30PM
(#26556908)
It might still be an issue, but this is still a huge improvement. If the browser is going to pick a protocol on behalf of the user, it ought choose a stronger protocol first.
[ Parent
| on HN ]
Re:Chrome’s address bar will use https:// by default
by ipsocannibal on Tuesday March 23, 2021 @12:58PM
(#26557244)
If the browser chooses the stronger protocol it should force the user to opt-in to any fallback behavior which might downgrade security. The current behavior of the browser in most cases is if you enter an 'https' url and the request fails or the cert is invalid you get a failure or warning message. I'd like to see this behavior kept in this case. It communicates what the browser is doing instead of silently downgrading the protocol based upon fuzzy failure signals.