Menu

Chrome 79 Beta: Virtual Reality Comes to the Web

October 31st, 2019

Unless otherwise noted, changes described below apply to the newest Chrome Beta channel release for Android, Chrome OS, Linux, macOS, and Windows. Learn more about the features listed here through the provided links or from the list on ChromeStatus.com. Chrome 79 is beta as of October 31, 2019. Virtual Reality Comes to the Web The…

Addressing some misconceptions about our plans for improving the security of DNS

October 28th, 2019

Whenever you type a URL into your browser (for example “redcross.org”), this information is sent to a domain name system (DNS) provider that converts that request into the unique numerical “IP address” (e.g. 162.6.217.119) that identifies websites on the Internet. Your browser then uses that numerical IP address to take you to the site you…

Automatically lazy-loading offscreen images & iframes for Lite mode users

October 24th, 2019

In Chrome 76, we introduced native lazy-loading for images and iframes via the `loading` attribute – a developer opt-in. In Chrome 77, Chrome Android users with  Lite Mode (Data Saver) enabled will benefit from native lazy-loading of images and iframes automatically. Lite mode has allowed Chrome to reduce users’ data usage by up to 60…

Developers: Get Ready for New SameSite=None; Secure Cookie Settings

October 23rd, 2019

In May, Chrome announced a secure-by-default model for cookies, enabled by a new cookie classification system (spec). This initiative is part of our ongoing effort to improve privacy and security across the web. Chrome plans to implement the new model with Chrome 80 on February 2020. Mozilla and Microsoft have also indicated an intent to…

Recent Site Isolation improvements

October 17th, 2019

In July 2018 we launched Site Isolation in Chrome as a way to secure desktop browsers against the risk of side-channel attacks like Spectre. We recently published a USENIX Security conference paper highlighting the benefits of this launch. Today, we are pleased to announce further improvements we’ve rolled out in Chrome 77: Chrome for Android…

DM Verity Algorithm Change

October 16th, 2019

One of the foundational security features of Chromebooks is Verified Boot, which protects our users from potentially malicious software being run on their devices. The last chain of verification in this process is to validate the integrity of the root file system (rootfs). This blog post describes a recent enhancement to this rootfs validation to…

No More Mixed Messages About HTTPS

October 3rd, 2019

Today we’re announcing that Chrome will gradually start ensuring that https:// pages can only load secure https:// subresources. In a series of steps outlined below, we’ll start blocking mixed content (insecure http:// subresources on https:// pages) by default. This change will improve user privacy and security on the web, and present a clearer browser security…

Chrome UI for Deprecating Legacy TLS Versions

October 1st, 2019

Last October we announced our plans to remove support for TLS 1.0 and 1.1 in Chrome 81. In this post, we’re announcing a pre-removal phase in which we’ll introduce a gentler warning UI, and previewing the UI that we’ll use to block TLS 1.0 and 1.1 in Chrome 81. Site administrators should immediately enable TLS…

Chrome 78 Beta: a new Houdini API, native file system access and more

September 20th, 2019

Unless otherwise noted, changes described below apply to the newest Chrome Beta channel release for Android, Chrome OS, Linux, macOS, and Windows. Find more information about the features listed here through the provided links or from the list on ChromeStatus.com. Chrome 78 is beta as of September 19, 2019. CSS Properties and Values CSS variables…

Experimenting with same-provider DNS-over-HTTPS upgrade

September 10th, 2019

As part of  our long-standing commitment to making the web safer to use, we will be conducting an experiment to validate our implementation of DNS-over-HTTPS (aka DoH) in Chrome 78. As the name implies, the idea is to bring the key security and privacy benefits of HTTPS to DNS, which is how your browser is…