1

I've called GoDaddy a few different times and they said that it looks like it is a problem with my HTML file. Except, my HTML file is the basic outline of a webpage, nothing fancy at all.

Chrome still says that the webpage is, "Not Secure" with the big red x over it.

I'm not sure what to do to fix it, I don't have any personal information on the site nor am I collecting any information from visitors (it's sort of an information site). I shouldn't need an SSL certificate because I am not hosting anything privately.

Improve this question
1
  • 1
    As of October of 2017, Google Chrome started marking pages without an SSL that have either a password or credit card field as “Not secure”. If you have either of these on any page (including inside iframes), you'll need to obtain an SSL. See their blog announcing this here: Chromium Blog - Next steps toward more connection security
    – dan ♦
    Commented Oct 20, 2017 at 5:42

1 Answer 1

Reset to default
6

This is a move to make the web more secure. Additionally, it protects all visitors to your site. The long-term solution is to implement SSL on your website(s), as all websites will eventually need to adopt the use of SSL certificates.

According to Google's Developer Blog:

Eventually, Chrome will show a Not Secure warning for all pages served over HTTP, regardless of whether or not the page contains sensitive input fields. Even if you adopt one of the more targeted resolutions above, you should plan to migrate your site to use HTTPS for all pages.

You absolutely need an SSL certificate. I am aware of the fact that they are overpriced at just about every registrar. To save some money, the Linux Foundation has a website which offers free SSL certificates, called * https://letsencrypt.org although this route may be slightly more labor intensive as it relates to installation vs. simply buying from Godaddy.

Improve this answer
3
  • The Linux Foundation had nothing to do with founding LetsEncrypt. In fact, iirc, it was originally formed by Mozilla and is now supported by many but it is not a Linux Foundation only project.
    – Rob
    Commented Oct 20, 2017 at 13:14
  • Not to go on about it but letsencrypt.org is owned by ISRG and the Linux Foundation only fairly recently started providing "organizational management", whatever that is. eweek.com/security/…
    – Rob
    Commented Oct 20, 2017 at 13:26
  • 1
    @Rob thanks for clarifying, I should not have assumed nor jumped to that conclusion.
    – Josh Salganik
    Commented Oct 21, 2017 at 1:02

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.