Google SSL by default appears in Firefox beta

Powered by SC Magazine
 

But secure surfing too slow for Chrome.

Mozilla Firefox is using Secure Sockets Layer (SSL) for Google searches from its site by default, in a move that will increase the security protections afforded to about a quarter of total internet users.

The change was built into the web browser's nightly beta builds but would not appear in the final stable releases for several months, according to US security and privacy researcher Christopher Soghoian.

Google's 'Speedy' experimental protocol for transporting web content was also expected to be used.

SSL could help protect users from some forms of censorship and monitoring, and prevent leakage of referral header information which provided web sites with the search terms used to reach their sites.

Referrer data concerns privacy pundits because it has the potential to expose sensitive user data such as location.

The incorporation of SSL by default into browsers was considered a death knell for referrer data, Soghoian said.

Google users signed into their accounts have had SSL searches by default since October. But SSL was not yet set as default in Google's Chrome browser.

Chrome software engineer Adam Langley appaulded the move by Mozilla but said SSL would not yet be introduced into Chrome because it affects speed and functionality.

We would welcome Firefox giving their users the option to use encrypted search. However, at this time we don't feel that our encrypted search offers the features and speed that our users expect and so we wouldn't want it to be the default,” he said in a post. “We are working towards making encrypted search as fast and complete as unencrypted search, but we're not there yet.”

Soghoain attacked Google, claiming the search company had discouraged Mozilla from using SSL by default, reportedly because it was more resource-intensive and lacked some functionality. He added that SSL should “at the very least” be made an option for Mozilla users for versions later than Firefox 4.0.

In December, AllThingsDigital reported that Google would pay Mozilla about $US300 million a year for three years to ensure it was the default search provider in Firefox browsers.

Copyright © SC Magazine, Australia


Google SSL by default appears in Firefox beta
 
 
 
Top Stories
Making a case for collaboration
[Blog post] Tap into your company’s people power.
 
Five zero-cost ways to improve MySQL performance
How to easily boost MySQL throughput by up to 5x.
 
Tracking the year of CIO churn
[Blog post] Who shone through in 12 months of disruption?
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Which is the most prevalent cyber attack method your organisation faces?




   |   View results
Phishing and social engineering
  68%
 
Advanced persistent threats
  4%
 
Unpatched or unsupported software vulnerabilities
  11%
 
Denial of service attacks
  6%
 
Insider threats
  12%
TOTAL VOTES: 1066

Vote