[HTTPS-Everywhere] Google native https

Heinz Repp Heinz.Repp at online.de
Wed Oct 19 08:59:10 PDT 2011


Hello,

Google announced native https support for its sites, the main site
https://www.google.com and its NLS variants already working:

http://googleblog.blogspot.com/2011/10/making-search-more-secure.html

This requires a rewrite (and simplification) of the google ruleset,
mainly just changing http to https without sending to
encrypted.google.com. This change should come soon, as the native
https://www.google.com has all its bells and whistles, but the
encrypted.google.com has not.

Google said it would do the redirection by itself only for logged-on
users, so support by https-everywhere is still needed, and in its
current form it even invalidates Google's approach for logged-on users.

Jm2c

Heinz



More information about the HTTPS-everywhere mailing list