Google Chrome 將在 115 版之後預設使用 HTTPS 連線
source link: https://blog.gslin.org/archives/2023/08/24/11312/google-chrome-%e5%b0%87%e5%9c%a8-115-%e7%89%88%e4%b9%8b%e5%be%8c%e9%a0%90%e8%a8%ad%e4%bd%bf%e7%94%a8-https-%e9%80%a3%e7%b7%9a/
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
Google Chrome 將在 115 版之後預設使用 HTTPS 連線
Google Chrome (Chromium) 宣布 115 版後將預設使用 HTTPS 連線：「Towards HTTPS by default」。
查了一下 115.0.5790.98 是 2023/07/18 就出的版本，現在才冒出這篇文章有點晚，但大概就是講一下幹了什麼事情？
We're currently experimenting with this change in Chrome version 115, working to standardize the behavior across the web, and plan to roll out the feature to everyone soon.
主要的差異是在於，即使你輸入或是點擊的連結是 http://，他還是會優先嘗試 HTTPS：
Chrome will automatically upgrade all http:// navigations to https://, even when you click on a link that explicitly declares http://.
只有在 http:// 連結遇到 upgrade 到 HTTPS 失敗時才會回頭用 HTTP：
This works very similarly to HSTS upgrading, but Chrome will detect when these upgrades fail (e.g. due to a site providing an invalid certificate or returning a HTTP 404), and will automatically fallback to http://.
而本來就用 https:// 的連線就完全不會碰 HTTP 了。
講到推動 HTTPS 這點，前陣子剛好也是 Snowden 揭露美國 PRISM (菱鏡計畫) 十年的日子，當年在揭露後也因此加速了各種加密技術的基礎建設，像是 Let's Encrypt，而這也使得 HTTPS 更加普及，也讓 Google Chrome 現在可以預設切 HTTPS。
Related
Google Chrome 要推動預設使用 HTTPS 連線
Google Chrome 從 90 版要把 https:// 變成網址輸入時的預設值：「A safer default for navigation: HTTPS」。Hacker News 上的「Chrome’s address bar will use https:// by default (chromium.org)」也可以看一下。 也就是說，沒有輸入 schema 的網址，預設會用 https:// 方式連線，以往這點需要透過 HTTPS Everywhere 這種套件，然後開啟「Encrypt All Sites Eligible」這樣的參數，像是這樣： 這樣會再推一把...
March 25, 2021In "Browser"
Chromium (Google Chrome) 修正 DNS 查詢問題後對 Root name servers 的壓力減輕不少
先前在「Chromium (Google Chrome) 實做對 Root DNS 的影響」這邊有提過 Chromium (以及 Google Chrome) 判斷所在的網路是不是有 NXDOMAIN hijack 的程式碼反而對 Root name servers 產生了巨大的 NXDOMAIN 流量。 因為上新聞所以才動了起來 (本來都沒什麼在動)，後來提供的方法是變成可以設定的選項，但預設是關閉的，這樣一來就可以改善 Root name servers 的壓力：「Add multi-state DNS interception policy - functionality piece.」。 而後在 Google Chrome 87 版進入 stable channel 後開始大幅緩解 (各平台分別在 2020/11/17 與 2020/11/18 釋出)，在繼續觀察幾個月後，上個禮拜 Verisign 的人在 APNIC…
February 12, 2021In "Browser"
Chromium 系列瀏覽器對 Google Search Engine 的不公平最佳化
在 tab 上放了一陣子的連結，忘記是哪邊看到的，在講 Chromium 系列瀏覽器會針對 Google Search Engine 最佳化：「Google’s unfair performance advantage in Chrome」。 作者發現 Chromium 瀏覽器會預先開 HTTPS 連線連到搜尋引擎，這樣可以大幅降低建立 HTTPS 連線時所需要的時間，包括了 DNS 查詢、TCP handshake 與 TLS handshake： I was looking for something else when I stumbled upon a feature called PreconnectToSearch. When enabled, the feature preemptively opens and maintains a…
July 16, 2021In "Browser"
Leave a Reply
Your email address will not be published. Required fields are marked *
Comment *
Name *
Email *
Website
Notify me of follow-up comments by email.
Notify me of new posts by email.
To respond on your own website, enter the URL of your response which should contain a link to this post's permalink URL. Your response will then appear (possibly after moderation) on this page. Want to update or remove your response? Update or delete your post and re-enter your post's URL again. (Learn More)
Post navigation
Recommend
About Joyk
Aggregate valuable and interesting links.
Joyk means Joy of geeK