Google's Obfuscated TCP

agl42 writes "Obfuscated TCP attempts to provide a cheap opportunistic encryption scheme for HTTP. Though SSL has been around for years, most sites still don't use it by default. By providing a less secure, but computationally and administratively cheaper, method of encryption, we might be able to increase the depressingly small fraction of encrypted traffic on the Internet. There's an introduction video explaining it."

Comments

Re:Firefox isn't helping

[Free the Cowards]

Nonsensical. SSL with a self-signed cert is more secure than HTTP. It's less secure than "real" SSL, sure. But the only reason there's any kind of "false sense of security" is because the browsers give it to the user, and instead of taking that away, they try to fight against themselves by adding warnings. It's bizarre.