3 ms·

Actually, they do. It's called Google Analytics, and it exists on a very large portion of the web. TLS isn't going to help protect you when the site you're on

by 908087 8y ago

Actually, they do. It's called Google Analytics, and it exists on a very large portion of the web. TLS isn't going to help protect you when the site you're on is loaded with user tracking and analytics scripts anyway.

ocdtrekkie 8y ago
This is why Google's pushing HTTPS Everywhere so hard, just like net neutrality: It eliminates Google's competition in collecting and monetizing data about your viewing. Google will claim that they make these moves because they care about your privacy, security, and freedom, but malicious tracking scripts they don't do anything about, because that would close off their own profit scheme.
- icebraining 8y ago
  Which competitors will be excluded by the increase in HTTPS? Which companies exactly are relying on the connections being unencrypted, and how are they able to monitor them? And if Google's competitors are spying on HTTP rather than using tracking scripts, why does seemingly every page I visit load tracking scripts from a bunch of companies?
  - ocdtrekkie 8y ago
    ISPs. HTTPS Everywhere and net neutrality laws are both endeavors designed to mitigate ISPs from providing ad networks and/or collecting data on Internet usage. Of course, Google claims they do this for your benefit, but if it was for your benefit, they'd need to stop doing the same things with tracking scripts. This is how you can tell they are pushing these to reduce competition, not to increase your privacy.
    - icebraining 8y ago
      I can't say I've ever seen Google claim HTTPS was intended to protect my privacy, but fair enough, I forgot that ISPs can do that in the US.
      - niftich 8y ago
        In one of the major announcements for Chrome, 'Moving towards a more secure web' (2016-09-08) [1], the Chrome Security Team writes: "Chrome currently indicates HTTP connections with a neutral indicator. This doesn't reflect the true lack of security for HTTP connections. When you load a website over HTTP, someone else on the network can look at or modify the site before it gets to you." The word 'modify' is a hyperlink to an article titled 'AT&T Hotspots: Now with Advertising Injection' [2] (ironically, a non-HTTPS site). [1] https://security.googleblog.com/2016/09/moving-towards-more-secure-web.html https://security.googleblog.com/2016/09/moving-towards-more-... [2] http://webpolicy.org/2015/08/25/att-hotspots-now-with-advertising-injection/ http://webpolicy.org/2015/08/25/att-hotspots-now-with-advert...

by 908087 8y ago

ocdtrekkie 8y ago

This is why Google's pushing HTTPS Everywhere so hard, just like net neutrality: It eliminates Google's competition in collecting and monetizing data about your viewing. Google will claim that they make these moves because they care about your privacy, security, and freedom, but malicious tracking scripts they don't do anything about, because that would close off their own profit scheme.

icebraining 8y ago
Which competitors will be excluded by the increase in HTTPS? Which companies exactly are relying on the connections being unencrypted, and how are they able to monitor them? And if Google's competitors are spying on HTTP rather than using tracking scripts, why does seemingly every page I visit load tracking scripts from a bunch of companies?
- ocdtrekkie 8y ago
  ISPs. HTTPS Everywhere and net neutrality laws are both endeavors designed to mitigate ISPs from providing ad networks and/or collecting data on Internet usage. Of course, Google claims they do this for your benefit, but if it was for your benefit, they'd need to stop doing the same things with tracking scripts. This is how you can tell they are pushing these to reduce competition, not to increase your privacy.
  - icebraining 8y ago
    I can't say I've ever seen Google claim HTTPS was intended to protect my privacy, but fair enough, I forgot that ISPs can do that in the US.
    - niftich 8y ago
      In one of the major announcements for Chrome, 'Moving towards a more secure web' (2016-09-08) [1], the Chrome Security Team writes: "Chrome currently indicates HTTP connections with a neutral indicator. This doesn't reflect the true lack of security for HTTP connections. When you load a website over HTTP, someone else on the network can look at or modify the site before it gets to you." The word 'modify' is a hyperlink to an article titled 'AT&T Hotspots: Now with Advertising Injection' [2] (ironically, a non-HTTPS site). [1] https://security.googleblog.com/2016/09/moving-towards-more-secure-web.html https://security.googleblog.com/2016/09/moving-towards-more-... [2] http://webpolicy.org/2015/08/25/att-hotspots-now-with-advertising-injection/ http://webpolicy.org/2015/08/25/att-hotspots-now-with-advert...