3 ms·
> Facebook enabled encryption by default in 2012. Kinda off-topic but this statement is false. Facebook HTTPS is not enabled by default, it's opt-in.
by glitchdout 13y ago
> Facebook enabled encryption by default in 2012.
Kinda off-topic but this statement is false. Facebook HTTPS is not enabled by default, it's opt-in.
- MichaelGG 13y agoI tried in 3 browsers (2 which I haven't gone to Facebook before), and Facebook didn't load over HTTP. Facebook sent HTTP STS headers, too. I believe you are incorrect.
- glitchdout 13y agoI used to be correct. You are right now, though. They started rolling out HTTPS for everyone on November, 2012 (http://webcache.googleusercontent.com/search?q=cache:developers.facebook.com/blog/post/2012/11/14/platform-updates--operation-developer-love/ http://webcache.googleusercontent.com/search?q=cache:develop...) But since I don't live in the US, it must have taken Facebook a long time to get to my country. I still remember telling all my friends to opt-in to HTTPS in 2012.