October 18, 2011 | By Peter Eckersley

Google Encrypts More Searches

Today, Google announced that it is switching its Search service for logged-in users over from insecure HTTP to encrypted HTTPS. This is a significant win for users: HTTPS is an essential protection against surveillance and alteration of your search traffic — whether by governments, companies, or hackers. Today's change appears to be designed to end a series of attacks that identified or tracked people based on the personalized search results Google gives them — but the protection also extends to outgoing search terms in many situations.

Google has offered HTTPS as an option for search users at https://encrypted.google.com for over a year, and we here at EFF built the HTTPS Everywhere Firefox extension to help users take advantage of that automatically.

There is one small caveat that users should be aware of with the new encrypted-when-logged-in Google. If you click on an advertisement, and the advertiser's website is HTTP rather than HTTPS, Google will send the search terms for that specific query to the advertiser over HTTP. The encrypted.google.com domain will continue to exist and will not have that behavior: on that domain, advertisers only get to see the search that lead to a click-through if they use HTTPS. Privacy conscious users should keep using HTTPS Everywhere, which will ensure that you're always using the encrypted.google.com domain. And of course, HTTPS Everywhere will also keep protecting you if you prefer to use Google Search without being logged in.


Deeplinks Topics

Stay in Touch

NSA Spying

EFF is leading the fight against the NSA's illegal mass surveillance program. Learn more about what the program is, how it works, and what you can do.

Follow EFF

Apple shows that privacy-threatening cloud computing and data collection do not have to be the industry standard. https://www.eff.org/deeplinks...

Sep 27 @ 4:51pm

Our friends at @calyxinstitute are doing exciting things with nonprofit access to 4G spectrum. https://boingboing.net/2016/0...

Sep 27 @ 4:20pm

Why do the changes to Rule 41 matter? We explain through the example of the "Playpen" government hacking cases. https://www.eff.org/deeplinks...

Sep 27 @ 3:53pm
JavaScript license information