4 ms·
Because they have no reason to do so.
by Hello71 14y ago
Because they have no reason to do so.
- mememememememe 14y agoHmm that's not a very good argument. Why should search page on Google be encrypted then? Youtube has search function too.
- mike-cardwell 14y agoIf a "google.com" request is MITM'd because it's not encrypted, then the MITM can do all sorts of extra damage, using that as a platform, to sites like "mail.google.com" Hence when google.com is forced over SSL when you're logged in, but not forced over SSL otherwise.
- J_Darnley 14y agoLast I checked, google search can also be accessed through http. The reason why youtube's search can be http without issue is that all results are on youtube so you won't be leaking the search to another site.
- xvolter 14y agoActually, Google enforces HTTPS nowadays when possible. YouTube however is entirely different, YouTube consumes too much bandwidth as-is, they would not want to enforce HTTPS and increase their overall bandwidth consumption like that. Additionally, on Google you could be searching for confidential things you do not want intercepted, YouTube is more social and public, therefore it is not as high priority. If you want to enforce HTTPS on sites, use an HTTPS everywhere plugin, https://chrome.google.com/webstore/detail/https-everywhere/gcbommkclmclpchllfjekcdonpmejbdp https://chrome.google.com/webstore/detail/https-everywhere/g... https://addons.mozilla.org/en-US/firefox/addon/https-finder/?src=search https://addons.mozilla.org/en-US/firefox/addon/https-finder/...