GOTCHA: Google caught STRIPPING SSL from BT Wi-Fi users' searches

  • 20 November 2014
  • 0 replies
  • 227 views

Userlevel 7
Badge +54

Choc Factory to build crypto bridge 'soon'

By Darren Pauli, 20 Nov 2014  Google's "encryption everywhere" claim has been undermined by Mountain View stripping secure search functions for BT WiFi subscribers piggy-backing off wireless connections, sysadmin Alex Forbes has found.
The move described as 'privacy seppuku' by Forbes (@al4) meant that BT customer searches were broadcast in clear text and possibly open to interception.
 Customers were told that the network, rather than the Chocolate Factory, "has turned off SSL search", a statement Forbes proved to be false.
Google engineer and security bod Adam Langley in a forum comment confirmed the SSL strip and said it would be removed 'soon'.
 
Full Article

0 replies

Be the first to reply!

Reply