Although HTTPS has long been widespread, HTTP content is still present on secure pages. Google is working to remedy this situation by adding a feature to its browser that will warn users if unsafe forms are found on pages. The so-called “mixed forms” threaten the security and privacy of user data. Despite the fact that they can be placed on HTTPS pages, this protocol is not used when transferring user-entered data. Data from such forms can be intercepted by attackers, so Google is fighting this.

Currently, in Chrome, the lock icon in the address bar disappears when the user navigates to a page with “mixed forms”. According to the developers, this is not enough, so in the future, the browser will more actively notify about it. Chrome 86 will disable autocomplete for such forms and display a warning. If the user enters data in such a form and tries to send them, a warning will appear prompting you to cancel the action or agree to the risks.