HTTP insecure connection warning from browser

[Lurker]

one day, if you access certain website with http connection, including this forum, you will get warning notice from browser that the website is insecure,

here the explanation :

Firefox 51, released today, and Chrome 56, have started describing some HTTP connections as insecure as they continue the industry-wide push to promote the use of encrypted HTTPS.

 

The non-secure labelling will occur on pages delivered over HTTP that include forms. Specifically, pages that include password fields, and in Chrome, credit card fields, will put warnings in the address bar to explicitly indicate that the connection is not secure

One somewhat common older development practice was to place the password field on a page delivered by HTTP, with the form submitted to a location protected by HTTPS. This offers little security in practice, however. Pages delivered by HTTP can be readily modified by eavesdroppers, meaning that an attacker could simply choose to submit the password data to a destination of their choosing, instead of the intended HTTPS location.

The non-secure label should encourage to developers to reduce their use of HTTP and make the switch to HTTPS whenever sensitive data is being handled. Google's approach is arguably a little clearer than Firefox's; where Firefox will use a padlock icon with a red line striking it through to indicate that a connection isn't secure, Chrome will explicitly put "Not secure" in the address bar.

Further work is planned in both browsers to highlight the use of HTTP. A future version of Firefox will include a warning immediately adjacent to the password box itself whenever the page is delivered over HTTP, and Mozilla plans to use the struck through padlock icon for every HTTP page. Similarly, Google intends to eventually include the "Not secure" message in the address bar for all pages delivered over HTTP, whether they contain passwords or not.

so dont worry. bout that

[artjom872]

I still have not used it myself but know there is this option: https://letsencrypt.org