January 9th, 2009

Google adds HTTPS-only browsing to Chrome

Posted by Ryan Naraine @ 4:03 pm

Categories: Arbitrary Code Execution, Browsers, Data theft, Denial of Service (DoS), Firefox, Google, Google Chrome, Java, Malware, Mozilla, Research, Responsible disclosure

Tags: Google Inc., Google Chrome, Hacking, Ssl/Tls, Phishing, Security, Web Browsers, Spam And Phishing, Internet, Ryan Naraine

Google has quietly released a pre-beta version of Google Chrome 2.0 with a new HTTPS-only browsing mode.

The new feature lets users add “force-https to your Google Chrome shortcut” to only load Web sites with valid security certificates.   “Sites with SSL certificate errors will not load,” the company explained.

The newest Chrome release also updates the WebKit and V8 JavaScript engines, offers a better implementation for SafeBrowsing (malware/phishing protection), and new code for the HTTP network protocol.

Google’s release notes provide more detail on the changes.

ALSO SEE:

• Google Chrome, the security tidbits
• Google Chrome vulnerable to carpet-bombing flaw
• Google hires browser hacking guru