The most popular Web browsers, and firstly Google Chrome and Firefox , now integrate a icon-based system for reporting Web sites, and in particular Web site sections that do not use HTTPS- based and secure SSL-based connections ; but today, according to a recent Federprivacy study , 82% of the 50 most visited Internet sites in the Italian language would still be reported as insecure.
To maximize the security of Web browsing, the most up-to-date browser releases are able to indicate how secure Web sites have SSL certificates, such notification occurs through the display of a small green padlock that certifies that the CA ( Certification Authority) that issues the certificates perform prior checking on the site. In fact, the latter must be accessible via 128-bit (or higher) encrypted secure communications protocol indicated by the “https” prefix and entered in the URL before the domain name.
If a user visits an Internet site marked in the address bar, prior to the URL, from a white circle with the letter “i” located in the center, the browser has notified that the resource does not use a secure connection . This means that if you want and with the right skills, some malicious user might be able to intercept, visualize, or alter the data exchanged through that page.
The white circle icon indicates that it is inappropriate to enter personal data or credentials of access to the current page because they would not be privately transmitted but “clear”. If the displayed symbol is a red triangle with an exclamation mark in the middle , the privacy risk should be considered even higher and filling out password fields or credit card payment forms could be extremely risky.
In the most serious cases, the browser may arrive at blocking the opening of a web page considered insecure by displaying a red screen where the user is warned about the risks that they would continue navigating; ignoring this warning you will not be liable for the application for any loss of data.
This simple icon-based notification system can also be used by people who run Internet sites, and in particular e-commerce activities , to alert developers and system administrators the need to adjust unprotected pages.
