Chrome will block http downloads from https sites

Google will phase in that Chrome will no longer accept mixed content downloads. These are downloads that the user initiates from an https site, but which do not themselves go through an encrypted connection.

Google blocks such downloads because users would not be aware of the risks to privacy and security. After all, Chrome does not yet give a notification when downloading via an http connection from a site that itself is opened via https. Starting with Chrome 82, which will be released in June, the company will start with these kinds of warnings. The browser starts with notifications when downloading risky files such as executables.

From Chrome 83, the browser then completely blocks the download of these types of files via http. With Chrome 84 and 85, which will be released consecutively in August and September, Google prevents Chrome from downloading archive files and documents respectively. And with the arrival of Chrome 86, scheduled for October, the browser will no longer accept mixed content downloads at all.

The aforementioned updates concern the desktop releases. The Chrome versions for Android and iOS always follow a release later, so Google starts warning in Chrome 83. According to the company, mobile users are already better protected against malware and the later release allows developers to prepare in time.