Google to Offer Encrypted Search

**BrianBosworth** · 18.05.10, 18:45

Google will begin letting users run encrypted searches on its flagship search site Google.com starting next week, the company said in a blog post Thursday.

Google to Offer Encrypted Search Next Week | Threat Level | Wired.com

I have my doubts about this.

**anon** · 18.05.10, 20:33

Was about time. I wonder why they haven't offered it until now.

**thecoolest** · 19.05.10, 11:47

thats going to be great...after all some secure search can be on google...alot time..

**Instab** · 19.05.10, 19:37

lol, the problem is not the connection but google itself

**anon** · 19.05.10, 19:39

But true SSL support means you can also use Scroogle's SSL to get rid of the tracking - done both by Google and otherwise.

**Instab** · 19.05.10, 19:42

Originally Posted by anon

But trü SSL support means you can also use Scroogle's SSL to get rid of the tracking - done both by Google and otherwise.

yep, that's a point

**Renk** · 24.05.10, 16:28

Originally Posted by anon

But true SSL support means you can also use Scroogle's SSL to get rid of the tracking - done both by Google and otherwise.

I have a question: When I use a ssl search engine e.g. google in ssl mode, is the entire URL encrypted, or only the communication between me and the search engine ?

In the first case, if I use a ssl search engine with keywords torrent, free, legal, linux, every third party able to monitor my connection (eg hotspot's owner) could guess that I'm searching for legal torrent of free linux distributions.

**thecoolest** · 24.05.10, 16:36

its alredy launched..but not working on my country atm..

https://www.google.com

**Renk** · 24.05.10, 17:47

Originally Posted by thecoolest

its alredy launched..but not working on my country atm..

https://www.google.com

It works for me at this moment.

And I'm unable to answer to my previous question: When (in Google SSL mode) I type keywords url, get , I'm directed to a result page. If I well untersand, all the data I see on this page are encrypted before be sent, and then decrypted on my PC, so that nobody (no other rhird party I mean) can read them.

But the URL leading to this page is:

Code:

https://www.google.com/#hl=en&source=hp&q=url+get&btnG=Google+Search&aq=f&aqi=g10&aql=&oq=url+get&gs_rfai=&fp=4c383209ff57cdc7

The keywords "url" and "get" do appear in this URL. So, a third party is able to know that I was performing a search on the keywords "url, get"

It's a point I had never though before.

**thecoolest** · 24.05.10, 17:50

hey mate its never secure anything..not even https tracker login page too so..dont worry

there is 1 thing secure always in windows...switch off the internet & no1 will know what you are doing or what you done ok

lol..jk

**Renk** · 24.05.10, 18:08

Originally Posted by thecoolest

there is 1 thing secure always in windows...switch off the internet & no1 will know what you are doing or what you done ok

lol..jk

Yes in theory but fortunately there are some steps before this radicale measure:

For example, when I use https://ixquick.com/ to perform a search on the keyword "example", the URL leading to the results page is:

Code:

https://ixquick.com/do/metasearch.pl

which is very different from a privacy point of view of:

Code:

https://www.google.com/#hl=en&source=hp&q=example&btnG=Google+Search&aq=f&aqi=g10&aql=&oq=example&gs_rfai=&fp=4c383209ff57cdc7

EDIT:
I have done an experiment: Instead of typing https://www.google.com/, I typed: https://74.125.79.104/ which led me on the same SSL Google page.

In the first case, when I then perform a search, for example with keyword example, I'm redirected to a https results page:

Code:

https://www.google.com/#hl=en&source=hp&q=example&btnG=Google+Search&aq=f&aqi=g10&aql=&oq=example&gs_rfai=&fp=64832cab153bffe1

But in the second case, after performing the same search from the same (at least, I suppose so) page, I'm redirected to a http results page (with the same content as the previous one)

Code:

http://www.google.com/search?hl=en&source=hp&q=example&btnG=Google+Search&aq=f&aqi=&aql=&oq=&gs_rfai=

Why and, above all, how to use SSL google with an IP address only, without using DNS resolvers ?

**anon** · 24.05.10, 18:31

IXQuick uses the POST method. Google uses the GET method, that's why the keywords are visible in the URL. Don't worry, when using SSL the whole client-server traffic is encrypted, including the query string (i.e. /q=word+word2...). You also don't send the HTTP referers (which I'm sure you've disabled anyway).