Google requesting switch to Secure for forms/text input fields

Request Type: 
General Assistance
Forums: 
YaleSites Prebuilt Features
Author: 
Blayze Markoya
Issue/Request: 
Dear YaleSites,
 
We have been receiving some security alerts for our sites re: text input fields (example attached below). Is there any way to fix this easily or at all? 
 
Please let us know.
 
Best,
Blayze
 
—

Chrome will show security warnings onhttp://yalecollege.yale.edu

To owner of http://yalecollege.yale.edu,

Starting October 2017, Chrome (version 62) will show a “NOT SECURE” warning when users enter text in a form on an HTTP page, and for all HTTP pages in Incognito mode.

The following URLs on your site include text input fields (such as < input type=”text” > or < input type=”email” >) that will trigger the new Chrome warning. Review these examples to see where these warnings will appear, so that you can take action to help protect users’ data. This list is not exhaustive.

The new warning is part of a long term plan to mark all pages served over HTTP as “not secure”.

Here’s how to fix this problem:

Migrate to HTTPS

To prevent the “Not Secure” notification from appearing when Chrome users visit your site, only collect user input data on pages served using HTTPS.

Need more help?

• Learn more about this change in the blog post Next Steps Towards More Connection Security.
• Learn how to Secure your site with HTTPS.
• Ask questions in our forum for more help - mention message type [WNC-10038795].
Josue Rodriguez on August 23, 2017:

Hello Blayze,

Yes that is something that Google is cooking up for their next version. Eventually all sites on HTTP will receive that error. Our suggestion is to get ahead of the game and request SSL be configured for your site. You can submit a ServiceNow Request so that we can forward it accordingly.

Josue