In the codebase used for the Chrome 86 release, the setting “chrome://flags#mixed-forms-disable-autofill” disables autofill for input forms on pages loaded over HTTPS but submitting data over HTTP. Autofill for authentication forms on pages opened over HTTP has been disabled in Chrome and Firefox for quite some time, but the indicator for disabling it has traditionally been the opening of a page with a form over HTTPS or HTTP; now, encryption during data submission to the form handler will also be taken into account. Additionally, in Chrome, a new warning will inform users about sending filled data over an unencrypted communication channel.
Source: opennet.ru
