Slashdot Mirror

← Back to Stories (view on slashdot.org)

Concerns Over Google Modifying SSL Behavior

Posted by timothy on from the hey-fellas-this-just-looks-bad dept.

Lauren Weinstein writes "Google is handling SSL search queries on https://www.google.com/ in a manner significantly different than the standard, expected SSL end-to-end behavior — specifically relating to referer query data. These changes give the potential appearance of favoring sites that buy ads from Google. Regardless of the actual intentions, I do not believe that this appearance is in the best interests of Google in the long run."

3 of 130 comments (clear)

  1. Yawn by TheEyes · · Score: 5, Insightful

    You know, I'd be a lot more concerned about this kind of thing if we weren't hearing Slashdot stories crying wolf practically every day. I'm just not impressed with people trying to call Google evil anymore; none of these so-called revelations have panned out so far, so how likely is this one to go any differently?

  2. Re:Its in the best interest of users by DarkFencer · · Score: 4, Insightful

    Yes, it is better for Google's users because they get to see referer data, probably even when they shouldn't.

    Oh...you thought *you* were one of Google's users? Chances are you are product, not a customer or a user.

    I know exactly who the 'product' and who the 'consumer' of Google is.

    Its irrelevant to this. When traffic is HTTP or HTTPS for Google searches, Google gets that traffic either way. When the traffic is HTTPS though, that means LESS people are getting it (wireless sniffing, routers along the way, etc.) in an unencrypted format. I really could care less what information the sites I go to are missing from the search I entered that brought me to them.

  3. Re:Its in the best interest of users by CAPSLOCK2000 · · Score: 5, Insightful

    That's not the point at all. Frankly, this has only little to do with SSL.

    The point is that if you pay for Google-ads, you will receive the referer-information, regardless of whether your site uses HTTPS or not, even when its breaks security for the user. If you don't pay you won't get the info.