Why is HTTPS needed?

Question

Information Security

Why does Chrome scare users on http sites with the message "Connection to the site is not secure"?



And all of us install these certificates.

And why does Time not care about this?

PS. I read this and this , but it's still not clear why Chrome is doing this.

Answer 1

warns because http traffic is easy to intercept. if annoying, it can be turned off.
time is not steamed, because it has nothing secret.
but the bank/payment system/personal account/etc already has something to lose, that's why they use https to "hide".
everyone puts it because:
- there is a rumor that it helps in seo
- the price of certificates has fallen
- free certificates have appeared

Answer 2

Https encrypts the data from you to the server. Otherwise, the content of the site is transmitted over the network in clear text and is available to intermediate network nodes. That is, in theory it can be analyzed and even changed. If the site has authorization, then the password will also be in clear text.
In the case of time.com, this is not critical, since there is not even authorization there. You are just watching the time.
In general, https is critical. This becomes important, for example, if you use someone else's proxy server or someone else's VPN or TOR. The owners of such services (especially the owners of the exit nodes of the TOR network) can be dishonest, and then encryption is very useful.
And Google (Chrome) and other progressive companies in general are in favor of https everywhere, so they are panicking.

Answer 3

The browser informs that any data entered will not be encrypted. And it's up to you to decide whether to enter your bank card pin there or not.
In general, they wrote a little higher about SSL certificates and the secure HTTPS protocol.