0

I've called GoDaddy a few different times and they said that it looks like it is a problem with my HTML file. Except, my HTML file is the basic outline of a webpage, nothing fancy at all.

Chrome still says that the webpage is, "Not Secure" with the big red x over it.

I'm not sure what to do to fix it, I don't have any personal information on the site nor am I collecting any information from visitors (it's sort of an information site). I shouldn't need an SSL certificate because I am not hosting anything privately.

  • 1
    As of October of 2017, Google Chrome started marking pages without an SSL that have either a password or credit card field as “Not secure”. If you have either of these on any page (including inside iframes), you'll need to obtain an SSL. See their blog announcing this here: Chromium Blog - Next steps toward more connection security – dan Oct 20 '17 at 5:42
6

This is a move to make the web more secure. Additionally, it protects all visitors to your site. The long-term solution is to implement SSL on your website(s), as all websites will eventually need to adopt the use of SSL certificates.

According to Google's Developer Blog:

Eventually, Chrome will show a Not Secure warning for all pages served over HTTP, regardless of whether or not the page contains sensitive input fields. Even if you adopt one of the more targeted resolutions above, you should plan to migrate your site to use HTTPS for all pages.

You absolutely need an SSL certificate. I am aware of the fact that they are overpriced at just about every registrar. To save some money, the Linux Foundation has a website which offers free SSL certificates, called * https://letsencrypt.org although this route may be slightly more labor intensive as it relates to installation vs. simply buying from Godaddy.

|improve this answer|||||
  • The Linux Foundation had nothing to do with founding LetsEncrypt. In fact, iirc, it was originally formed by Mozilla and is now supported by many but it is not a Linux Foundation only project. – Rob Oct 20 '17 at 13:14
  • Not to go on about it but letsencrypt.org is owned by ISRG and the Linux Foundation only fairly recently started providing "organizational management", whatever that is. eweek.com/security/… – Rob Oct 20 '17 at 13:26
  • 1
    @Rob thanks for clarifying, I should not have assumed nor jumped to that conclusion. – Josh Salganik Oct 21 '17 at 1:02

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.