A couple of weeks ago, I received an email from Google. It read:
Chrome will show security warnings on http://burningbird.net
To owner of http://burningbird.net,
Starting October 2017, Chrome (version 62) will show a “NOT SECURE” warning when users enter text in a form on an HTTP page, and for all HTTP pages in Incognito mode.
The following URLs on your site include text input fields (such as < input type=”text” > or < input type=”email” >) that will trigger the new Chrome warning. Review these examples to see where these warnings will appear, so that you can take action to help protect users’ data. This list is not exhaustive.
http://burningbird.net/tag/foia/
http://burningbird.net/tag/standards/
http://burningbird.net/tag/epub/
http://burningbird.net/
The new warning is part of a long term plan to mark all pages served over HTTP as “not secure”.
Here’s how to fix this problem:
Migrate to HTTPS
To prevent the “Not Secure” notification from appearing when Chrome users visit your site, only collect user input data on pages served using HTTPS.
Like many web sites, mine contain an input field that people can use to search through articles. It’s this search field that triggered the warning.