Google SSL by default appears in Firefox beta

Powered by SC Magazine
 

But secure surfing too slow for Chrome.

Mozilla Firefox is using Secure Sockets Layer (SSL) for Google searches from its site by default, in a move that will increase the security protections afforded to about a quarter of total internet users.

The change was built into the web browser's nightly beta builds but would not appear in the final stable releases for several months, according to US security and privacy researcher Christopher Soghoian.

Google's 'Speedy' experimental protocol for transporting web content was also expected to be used.

SSL could help protect users from some forms of censorship and monitoring, and prevent leakage of referral header information which provided web sites with the search terms used to reach their sites.

Referrer data concerns privacy pundits because it has the potential to expose sensitive user data such as location.

The incorporation of SSL by default into browsers was considered a death knell for referrer data, Soghoian said.

Google users signed into their accounts have had SSL searches by default since October. But SSL was not yet set as default in Google's Chrome browser.

Chrome software engineer Adam Langley appaulded the move by Mozilla but said SSL would not yet be introduced into Chrome because it affects speed and functionality.

We would welcome Firefox giving their users the option to use encrypted search. However, at this time we don't feel that our encrypted search offers the features and speed that our users expect and so we wouldn't want it to be the default,” he said in a post. “We are working towards making encrypted search as fast and complete as unencrypted search, but we're not there yet.”

Soghoain attacked Google, claiming the search company had discouraged Mozilla from using SSL by default, reportedly because it was more resource-intensive and lacked some functionality. He added that SSL should “at the very least” be made an option for Mozilla users for versions later than Firefox 4.0.

In December, AllThingsDigital reported that Google would pay Mozilla about $US300 million a year for three years to ensure it was the default search provider in Firefox browsers.

Copyright © SC Magazine, Australia


Google SSL by default appears in Firefox beta
 
 
 
Top Stories
Beyond ACORN: Cracking the infosec skills nut
[Blog post] Could the Government's cybercrime focus be a catalyst for change?
 
The iTnews Benchmark Awards
Meet the best of the best.
 
Telstra hands over copper, HFC in new $11bn NBN deal
Value of 2011 deal remains intact.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Who do you trust most to protect your private data?







   |   View results
Your bank
  38%
 
Your insurance company
  4%
 
A technology company (Google, Facebook et al)
  8%
 
Your telco, ISP or utility
  8%
 
A retailer (Coles, Woolworths et al)
  3%
 
A Federal Government agency (ATO, Centrelink etc)
  19%
 
An Australian law enforcement agency (AFP, ASIO et al)
  14%
 
A State Government agency (Health dept, etc)
  6%
TOTAL VOTES: 1888

Vote
Do you support the abolition of the Office of the Information Commissioner?