For: Everyone with a website
Google is making more changes to how it shows “secure” sites in Chrome over the coming months. No longer is simply having SSL enabled good enough, moving forwards all the site content will need to be secure, otherwise the website will show a warning instead of the padlock in the address bar.
Up until now, the two main things every website should have are SSL (so that it gets a padlock in the address bar) and be mobile friendly.
Starting in December every website should ensure every component is secured properly. This means sites that use iFrames, or images, or pointers to resources (pictures, videos etc) that are stored elsewhere are affected.
By the time February rolls around the behaviour will change from showing a warning in the address bar (it will still do that) to outright blocking sections of the site that aren’t configured correctly.
To summarise, I'll use a quoted recommendation “Webmasters are advised to look into making sure their websites don't load any resources over HTTP anymore. This includes iframes, cookies, CSS files, JavaScript files, audio, video, and especially images”.
If you’re website doesn’t show with a padlock today, you’re already behind the proverbial eight ball and should get onto your hosting provider (or change to a better one).
If yours is a site hosted by us - good news - your site is already prepared for these changes and there is nothing to do.
For those with websites hosted by others, it wouldn't hurt to reach out to ask if your site will be covered by these changes.
Finally for more on the changes, you can find the announcement from Google here .