Secure Search

[SHA-hi]

https://www.google.com/

The EFF has an article about it here. http://www.eff.org/deeplinks/2010/05...crypted-search

Thought you guys might like something other than pacman today.

[resheth]

Re: Secure Search

finally. This is much better

[TheCotMan]

Re: Secure Search

Google search form at top for google with "forum.defcon.org" or "defcon.org" or "all web" now changed from http to https.

[bjaming]

Re: Secure Search

it just redirects me to http://

[theprez98]

Re: Secure Search

Worked fine for me

[TheCotMan]

Re: Secure Search

it just redirects me to http://

To examine your report, I fired up my network analysis tool, and from my side, I see the request passed to google as https, and I see no direction from google to re-submit my request as http.

Then, I logged out of my google account, and tried again, but saw the same results, and no https -> http redirection.

The link above in the form for google search specifies https is what should be used to submit the form data to google. Once google gets the data in the request, I can't control how they provide redirection or other results. Also, can't control how any proxies you may be using might redirect your requests.

Anyone else find this problem with google redirecting your submission from https to http with google search?

If so, are you using a proxy? Are you using a non-US IP address? Anything else out of the ordinary?

[g3k_]

Re: Secure Search

I think it's on google's end. I did a search last night starting out at https://google.com, but when the search results came up, it redirected to http. Like the original post said, they are still rolling it out, and the results might be from server farms located at your region, which haven't received the update. When the search from the top is initiated, it might just go by the user's closest farm. Testing now :)

edit: everything worked properly, but I'm not at my home location where I saw the improper redirection.

[SHA-hi]

Re: Secure Search

I believe Google is having a problem with providing you the HTTPS page when you click the link, as direct request (http-header related problem) will resolve correctly. This is probably the part of the google DNS redirect code that spits out google US, google Canada, Google Brazil, etc...

[xarf]

Re: Secure Search

The search re-direction is working OK for me here, I get https:// on defcon search.

Geographic hits on the google name (google.co.uk, .nl, .dk etc) will re-direct to http:// as it seems that only .com is able to use https://. However interestingly .hk and .jp https:// are showing as SSL enabled but have cert errors (wrong domain name: .com should be .hk/.jp).

[The Dark Tangent]

Re: Secure Search

I also use the Google Sharing plug in for Fire Fox by Moxie Marlinspike. It is https, but also hides your search from google so you get added privacy.

If you want, they are always looking for people to help by running their own google sharing proxie.