Google SSL by default appears in Firefox beta

Powered by SC Magazine

But secure surfing too slow for Chrome.

Mozilla Firefox is using Secure Sockets Layer (SSL) for Google searches from its site by default, in a move that will increase the security protections afforded to about a quarter of total internet users.

The change was built into the web browser's nightly beta builds but would not appear in the final stable releases for several months, according to US security and privacy researcher Christopher Soghoian.

Google's 'Speedy' experimental protocol for transporting web content was also expected to be used.

SSL could help protect users from some forms of censorship and monitoring, and prevent leakage of referral header information which provided web sites with the search terms used to reach their sites.

Referrer data concerns privacy pundits because it has the potential to expose sensitive user data such as location.

The incorporation of SSL by default into browsers was considered a death knell for referrer data, Soghoian said.

Google users signed into their accounts have had SSL searches by default since October. But SSL was not yet set as default in Google's Chrome browser.

Chrome software engineer Adam Langley appaulded the move by Mozilla but said SSL would not yet be introduced into Chrome because it affects speed and functionality.

We would welcome Firefox giving their users the option to use encrypted search. However, at this time we don't feel that our encrypted search offers the features and speed that our users expect and so we wouldn't want it to be the default,” he said in a post. “We are working towards making encrypted search as fast and complete as unencrypted search, but we're not there yet.”

Soghoain attacked Google, claiming the search company had discouraged Mozilla from using SSL by default, reportedly because it was more resource-intensive and lacked some functionality. He added that SSL should “at the very least” be made an option for Mozilla users for versions later than Firefox 4.0.

In December, AllThingsDigital reported that Google would pay Mozilla about $US300 million a year for three years to ensure it was the default search provider in Firefox browsers.

Copyright © SC Magazine, Australia

Google SSL by default appears in Firefox beta
Top Stories
Business-focused Windows 10 brings back the Start menu
Microsoft skips 9 for the "greatest enterprise platform ever".
Feeling Shellshocked?
Stay up to date with patching for the Bash bug.
Amazon forced to reboot EC2 to patch Xen bug
Rolling restarts over next week.
Sign up to receive iTnews email bulletins
Latest Comments
Which is the most prevalent cyber attack method your organisation faces?

   |   View results
Phishing and social engineering
Advanced persistent threats
Unpatched or unsupported software vulnerabilities
Denial of service attacks
Insider threats