In the Chromium blog, Google announced , Chrome will begin to prevent "mixed content download" (non-HTTPS download on the security page), to further ensure safety, until finally completely abolished support for Chrome unsafe downloads.
According to the timetable provided by Google, starting with Chrome 82 (to be released in April 2020), Chrome will warn and then gradually began to stop these mixed content download. File type (such as executable files) users pose the greatest risk will be the first affected, followed by the release will include more file types.
Specifically, Google will process into six steps, namely:
- Chrome 81 (to be released March 2020): display console messages, warning all mixed content download;
- Chrome 82 (to be released April 2020): Warning executable files (such as .exe) mixed content download;
- Chrome 83 (to be released in June 2020): mixed content to block executable files, mixed content warnings archives (.zip) and disk image (.iso);
- Chrome 84 (to be released in August 2020): prevent mixing of the contents of an executable file, the archive and disk image;
- Chrome 85 (to be released in September 2020): Warning mixed content download images, audio, video and text, block all other hybrid content download;
- Chrome 86 (to be released October 2020): Block all mixed content download.
These are including Windows, macOS, Chrome OS and Linux desktop platform, including plans, Android and iOS will be a delayed version of Chrome 83 issued a warning from the start.
In the current version of Chrome Canary or the upcoming release of Chrome 81, developers can enable the chrome: // flags / # "through an unsecured connection to download content on the dangerous-unsafe-downloads-as-active-content treat activities deemed mixed content "(Treat risky downloads over insecure connections as active mixed content) to activate the alarm to be tested.
Google expressed the hope to further restrict unsafe downloaded in Chrome and encourage developers to migrate completely to HTTPS, to avoid future be limited, while providing protection for the user.