[HTTPS-Everywhere] Google native https
Heinz Repp
Heinz.Repp at online.de
Wed Oct 19 08:59:10 PDT 2011
Hello,
Google announced native https support for its sites, the main site
https://www.google.com and its NLS variants already working:
http://googleblog.blogspot.com/2011/10/making-search-more-secure.html
This requires a rewrite (and simplification) of the google ruleset,
mainly just changing http to https without sending to
encrypted.google.com. This change should come soon, as the native
https://www.google.com has all its bells and whistles, but the
encrypted.google.com has not.
Google said it would do the redirection by itself only for logged-on
users, so support by https-everywhere is still needed, and in its
current form it even invalidates Google's approach for logged-on users.
Jm2c
Heinz
More information about the HTTPS-everywhere
mailing list