How Google’s HTTPS-first mandate is reshaping mobile subscriber identity and what Operators must do now
Mobile network operators have long relied on Header Enrichment as a tool to authenticate and identify their subscribers, enabling use cases ranging from seamless single sign-on and age verification to personalisation, service entitlement, and billing.
That capability is now under pressure.
By October 2026, it will be structurally unavailable for the majority of mobile web traffic and a growing share of mobile app traffic. The trigger is Google’s “Always Use Secure Connections” (HTTPS-first) rollout. Chrome 147, released in April 2026, began warning users before loading HTTP pages for approximately one billion enhanced safe browsing users. Chrome 154, scheduled for October 2026, will enable this behaviour by default for all Chrome users, accelerating the industry’s transition to fully encrypted web traffic.
This is the natural outcome of the web’s continued evolution toward stronger security and privacy protections. While this transition requires operators to rethink how subscriber identity is delivered, it also represents an important step towards a safer and more privacy-conscious digital ecosystem.
Upstream has been a pioneer in network-based subscriber identification with Mobile ID, a patented solution for HTTPS-compatible subscriber identification, successfully deployed with operators in Brazil, South Africa and Nigeria.
Download our new white paper to learn what is happening, why existing solutions are breaking, and what operators need to do now.
Upstream’s Mobile ID keeps subscriber identity working through the transition and beyond, with:
- Simple, one-time network setup. Requires only simple configuration, compatible with most modern GGSNs, with an alternative implementation path available for non-supportive infrastructure.
- Flexible hosting. Flexible deployment options to help you meet all local data privacy regulations.
- Proven, patented technology. Trusted in live operator networks across multiple markets.
- Rapid time to market. Deployable and fully operational before Chrome’s October 2026 enforcement deadline.
Download the white paper now
Interested to get in touch with the Upstream team? Click here.
