March 30, 2020

Chrome may bring back ‘www’ with option to show full URLs

Google's doing so grudgingly: it still thinks that showing too much will confuse users trying to assess a site's security.

Naked Security

March 27, 2020

Firefox 76 will have option to enforce HTTPS-only connections

The aim is to block the browser from reaching the small number of sites that cling to HTTP, closing security risks.

Naked Security

March 02, 2020

Let’s Encrypt issues one billionth free certificate

Thanks to this flood of free certificates, the web is a lot more encrypted than it was a few years ago.

Naked Security

February 28, 2020

Firefox rolling out DNS-over-HTTPS privacy by default in the US

Mozilla has said it plans to make a privacy technology called DNS-over-HTTPS (DoH) the default setting for US users of Firefox within weeks.

Naked Security

February 24, 2020

SSL/TLS certificate validity chopped down to one year by Apple’s Safari

From 1 September 2020, Safari will no longer trust SSL/TLS certificates with more than a year on the clock.

Naked Security

February 10, 2020

Google Chrome to start blocking downloads served via HTTP

Google has announced a timetable for phasing out insecure file downloads in the Chrome browser starting with desktop version 81 due next month.

Naked Security

February 06, 2020

Google’s Chrome 80 clamps down on cookies and notification spam

Version 80 of the Chrome browser is out with some new features designed to save your security and your sanity.

Naked Security

November 06, 2019

Mozilla says ISPs are lying to Congress about encrypted DNS

Mozilla on Friday posted a letter urging Congress to take the broadband industry's lobbying against encrypted DNS within Firefox and Chrome with a grain of salt.

Naked Security

October 11, 2019

Most Americans don’t have a clue what https:// means

...and wouldn't know 2FA from a hole in the ground, according to Pew Research.

Naked Security