Google SSL by default appears in Firefox beta

Powered by SC Magazine
 

But secure surfing too slow for Chrome.

Mozilla Firefox is using Secure Sockets Layer (SSL) for Google searches from its site by default, in a move that will increase the security protections afforded to about a quarter of total internet users.

The change was built into the web browser's nightly beta builds but would not appear in the final stable releases for several months, according to US security and privacy researcher Christopher Soghoian.

Google's 'Speedy' experimental protocol for transporting web content was also expected to be used.

SSL could help protect users from some forms of censorship and monitoring, and prevent leakage of referral header information which provided web sites with the search terms used to reach their sites.

Referrer data concerns privacy pundits because it has the potential to expose sensitive user data such as location.

The incorporation of SSL by default into browsers was considered a death knell for referrer data, Soghoian said.

Google users signed into their accounts have had SSL searches by default since October. But SSL was not yet set as default in Google's Chrome browser.

Chrome software engineer Adam Langley appaulded the move by Mozilla but said SSL would not yet be introduced into Chrome because it affects speed and functionality.

We would welcome Firefox giving their users the option to use encrypted search. However, at this time we don't feel that our encrypted search offers the features and speed that our users expect and so we wouldn't want it to be the default,” he said in a post. “We are working towards making encrypted search as fast and complete as unencrypted search, but we're not there yet.”

Soghoain attacked Google, claiming the search company had discouraged Mozilla from using SSL by default, reportedly because it was more resource-intensive and lacked some functionality. He added that SSL should “at the very least” be made an option for Mozilla users for versions later than Firefox 4.0.

In December, AllThingsDigital reported that Google would pay Mozilla about $US300 million a year for three years to ensure it was the default search provider in Firefox browsers.

Copyright © SC Magazine, Australia


Google SSL by default appears in Firefox beta
 
 
 
Top Stories
ATO shaves $4m off IT contractor panel
Reform cuts admin burden, introduces KPIs.
 
Turnbull introduces data retention legislation
Still no definition of metadata to be stored.
 
Crime Commission prepares core systems overhaul
Will replace 30 year-old national criminal database.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
In which area is your IT shop hiring the most staff?




   |   View results
IT security and risk
  27%
 
Sourcing and strategy
  13%
 
IT infrastructure (servers, storage, networking)
  21%
 
End user computing (desktops, mobiles, apps)
  14%
 
Software development
  25%
TOTAL VOTES: 437

Vote
Would your InfoSec team be prepared to share threat data with the Australian Government?

   |   View results
Yes
  54%
 
No
  46%
TOTAL VOTES: 210

Vote