The #ChromeDevSummit site is live, happening Nov 12-13 in San Francisco, CA
Check it out for details and request an invite. We'll be diving deep into modern web tech & looking ahead to the platform's future.

Security and Identity

Security is a big topic, here are a few things to get you started.

Encrypting Data in Transit

One of the most critical security features, one that is required for many modern APIs and progressive web apps is Secure HTTP also called HTTPS. A common misconception about HTTPS is that the only websites that need it are those that handle sensitive communications. If privacy and security weren't reason enough to protect your users, many new browser features such as service workers the Payment Request API require HTTPS.

Enabling HTTPS on Your Servers

Content Security Policy

Content Security Policy or CSP provides a rich set of directives that enable granular control over the resources a page is allowed to load and where they're loaded from.
Learn More

Prevent Mixed Content

One of the more time-consuming tasks in implementing HTTPS is finding and fixing content that mixes both HTTPS and HTTP. Fortunately there are tools to help you help you with this.
Get Started

Chrome DevTools


Was this page helpful?