Internet users who connect to the Internet out of a computer network have to be very careful about the data they send and receive, and how they do that. The Firefox add-on Firesheep was definitely not the first program to show how easy it is to record data from other users of the network but it brought the issue to a wider audience.
One of the biggest issues can be brought down to the following four words: Http bad, https good. Most web connections are http connections which is fine as long as no important or private data is transferred. Data in this regard can be anything from username and passwords to financial documents or a private message to a friend at a website.
Users in the same network can spy on the traffic but only if the connections are made via http. Https connections on the other hand are encrypted which more or less protects the information from man in the middle attacks and users in the same network.
SaferChrome is a security extension for Chrome that aids the user by offering additional protection against man in the middle attacks. The extension notifies the user whenever login information will be sent in the clear.
This helps detecting site that don't use SSL or use it incorrectly. It also helps preventing SSL strip attack that rewrite the form action to trick you into sending your password over HTTP rather than HTTPS.
The extension displays a warning notification at the top and an icon in the address bar. A click on the icon opens a detailed report about the website and the problems the extension has detected.
The extension furthermore offers to redirect http traffic to https. This may not work on all sites but can be easily undone.
Users who visit websites with problems have the option to force https to see if this resolves the security issue or contact the webmaster manually to request that it will be fixed. The extension helps users identify websites with improper security.
Safer Chrome is available for download at the Chrome repository.Advertisement
Advertising revenue is falling fast across the Internet, and independently-run sites like Ghacks are hit hardest by it. The advertising model in its current form is coming to an end, and we have to find other ways to continue operating this site.
We are committed to keeping our content free and independent, which means no paywalls, no sponsored posts, no annoying ad formats or subscription fees.
If you like our content, and would like to help, please consider making a contribution:
Ghacks is a technology news blog that was founded in 2005 by Martin Brinkmann. It has since then become one of the most popular tech news sites on the Internet with five authors and regular contributions from freelance writers.