Search form

2542832
Enhancing Browser Security

At eBay, we want to ensure our marketplace remains the number one destination for online shoppers. To do so, we’re continuing to strengthen our security measures to provide the most secure platform for both buyers and sellers.

Topics we'll cover

What You Need to Know

--Paragraph Start--
  • As previously noted, to ensure we’re in line with industry standards and to bring more buyers to you, from July 2018, non-secure content will be flagged as ‘Not secure’ on Google Chrome browsers. Hypertext Transfer Protocol (HTTP) sites are considered non-secure.
  • From late January 2019, all ‘new’, ‘relist’, ‘sell similar’ and ‘sell one like this’ listings created with non-secure content will be blocked from submitting unless updated to HTTPS (Hypertext Transfer Protocol Secure).  
  • Current non-secure listings will continue to be displayed as ‘Not secure’ to buyers and require an additional click to view the full item description.
     
--Paragraph End--

Strengthening Your Browser Security

--Paragraph Start--

As announced in 2017, we’re committed to providing the most secure platform so that eBay remains the number one destination for online shoppers.To do so, we required non-secure listings to be updated to HTTPS to ensure they’re secure and in line with industry standards.

For current non-secure listings, the disclaimer ‘Not secure’ is marked by browsers and also requires an additional click from buyers (one click away) to see the full item description.

 

Not secure disclaimer:

 

One-click away:

 

From July 2018, Google will be tightening its HTTPS protocols and measures. To ensure we’re in line with industry standards and to bring more buyers to you, all non-secure content will be flagged as ‘Not secure’ on Google Chrome browsers.

From late January 2019, all ‘new’, ‘relist’, ‘sell similar’ and ‘sell one like this’ listings created with non-secure content (HTTP) will be blocked from submitting unless updated to HTTPS. Current non-secure listings will continue to be displayed as ‘Not secure’ to buyers and require an additional click to view the full item description.

Ensure you make buyers feel confident and secure when shopping with you - update your listings now. Check here to see if you have any non-compliant existing listings that require updating to HTTPS.
 

--Paragraph End--

What You Need to Do

--Paragraph Start--

In order to avoid any impact on the shopping experience, we recommend you update your non-secure listings to HTTPS. To do so, please follow the below steps:

  1. Use this tool to identify your eBay listings that contain non-secure, HTTP content.
  2. If the tool flags non-secure content, determine if the third-party websites you use to host content, commonly called domains, are compliant with the stronger browser security standards (HTTPS). You may be able to find this information on the host domain's website or by contacting the domain. eBay is also working with domains to ensure that as many as possible are prepared for the October updates to strengthen browser security.
  3. When you've confirmed that your host domains support HTTPS, find all uses of "HTTP" in your listings and replace them with "HTTPS". eBay's bulk edit tool can help you make this change 200 listings at a time. In the Seller Hub "Listings" tab, select noncompliant listings, click Edit, then Edit fields, and select Item description. In the Item description field, click the drop down to select Edit listings in bulk - find and replace.


     
  4. If a host domain is not compliant with the stronger browser security standards, and you wish for the full item description to be displayed, remove content hosted on that domain from your listing. Once they are HTTPS compliant you can reinstate the content into your listings.
  5. If you use a third-party selling solution, contact your provider for assistance in identifying and updating non-secure content, and making your listings HTTPS compliant.

 

Common HTTP Content

Below are some of the most common kinds of content found in sellers’ listings, store templates, and elsewhere that may be using nonsecure, HTTP URLs.

Externally hosted pictures:

  • Listing descriptions: <img src="http://xyz.com.au/..." alt="Sample Text" height="42" width="42">
  • Product variants, in multi-variation listings: <img src="http://xyz.com.au/..." alt="Sample Text" height="42" width="42">
  • The Trading API (and related APIs): <PictureURL> http://xyz.com.au/</PictureURL>
  • The Inventory API: "imageUrls": [ "http://xyz.com.au/" ]
  • The Merchant Integration Platform (MIP): Product feed, Combined feed

Cascading style sheets (CSS):

  • References to CSS resources: <link rel="stylesheet" type="text/css" href="http://xyz.com.au/...">
  • References within CSS:
    - body { background-image: url("http://xyz.com.au/abc.gif”); }
    - .banner { background: url("http://xyz.com.au/banner.png");
    - ul { list-style: square url(http://xyz.com.au/block.png);}

HTML5 video:
 <video width="10" height="10" controls>
      <source src="http://xyz.com..au/" type="video/mp4">
</video>

HTML5 audio:
 <audio controls>
    <source src="http://xyz.com.au/" type="audio/mpeg">
</audio>

--Paragraph End--

When Will This Happen?

--Paragraph Start--
  • July 2018 - On Google Chrome 68 browsers, all HTTP sites marked as “Not Secure” by default.

 

  • September 2018 - On Google Chrome 69 browsers, visual cues for HTTPS in Chrome’s user interface will change. Secure indicator (Green lock) removed from HTTPS sites in September.

 

  • October 2018 - On Google Chrome 70: “Not Secure” warnings will be shown in red when users enter input in HTTP pages.


 

  • Late January 2019 - All ‘new’, ‘relist’, ‘sell similar’ and ‘sell one like this’ listings created with non-secure content (HTTP) will be blocked from being submitted unless updated to HTTPS. Non-secure listings will see a blocking message until the non-secure content is removed.
--Paragraph End--

How Do You Benefit?

--Paragraph Start--
  • Buyers will feel more confident and secure in doing business with you
  • Secure and reliable place to buy and sell
  • Increased privacy for your business
  • Being aligned with industry standards.
--Paragraph End--

FAQs

NEXT

NEXT ARTICLE