Google Chrome will block download of certain files with HTTP-protocol

Google developers plan to implement in Chrome browser blockage for upload of certain file types that are trying to pass through the unprotected HTTP – protocol.

Default blocking will be applied only to certain file types that possess “potential threat”. “Hazardous” file types include: EXE (executive Windows file), DMG (executive macOS file), CRX (Chrome extension package) and all common archive formats as ZIP, GZIP, BZIP, TAR, RAR and 7z.

File of listed formats are concerning as are often used for disguising malware programs.

Google will automatically block download of named above files if for download is used HTTP-protocol.

Internet shop develops emphasize, that blocking downloads from websites that work with HTTP is pointless as Chrome notifies user about unprotected connection.

Google employee Emili Stark informed about Chrome innovation by mailing to W3C-community and appealed other developers to follow their example.

“I want to see if other browsers would be interested in joining us in this adventure,” — said Emily Stark.

Mozilla already reacted on the call:

“We are interested in exploring these ideas further in conversation with Google and other interested parties. The general idea aligns with the steps we have previously taken to protect users from insecurely delivered content.”

Emily Stark followers` poll on Twitter

Source: https://www.zdnet.com/article/google-chrome-engineers-want-to-block-some-http-file-downloads/