What does HTTPS Everywhere add to online security?

ITworld Answers

Ask a Question

What does HTTPS Everywhere add to online security?

wstark 1 year ago

Why is there a sudden push for HTTPS Everywhere? I realize that there are many people who don't utilize basic security steps (install patches, anti-malware, etc.) but what does HTTPS add that taking those steps and using strong passwords ignores? And if it is so important, why are HTTPS plugins not widely available for browsers other than Firefox?

Tags: browsers, Firefox, HTTPS, security

Topic: Security

Answer this Question

Login or register to post answers
Permalink

Answers

2 total

zeeman 1 year ago

I'm not sure how sudden the push for HTTPS is, but in my opinion it is a good thing. HTTPS means that your browser connection is secure, hence the "S". That is usually the case when you log in at most sites anyway, but the problem is that after login, they usually revert back to an unsecured HTTP connection. I assume that the plugin is available for Firefox because of the Firesheep plugin exists for Firefox. Firesheep examines network traffic and searches for unsecure cookies that it can use to spoof your username/password. The HTTPS Everywhere campaign is a push by the Electronic Freedom Foundations to both encourage individuals to use the HTTPS Everywhere plugin for Firefox and encourage popular website to provide secure connections.

Share this answer
Permalink

jimlynch 1 year ago

Hi wstark,

HTTPS Everywhere is one attempt at improving web security for browser users. Here's a good article that covers it and that has a download link.

HTTPS Everywhere
http://www.pcworld.com/downloads/file/fid,157688/description.html

"A collaboration between the Electronic Frontier Foundation and the Tor Project (which employs a network and free software to help protect people's privacy), HTTPS Everywhere ensures that when you visit certain sites, all of your communications are encrypted and secure.

To use it, all you need to do is install it. Once you do that, HTTPS Everywhere does its work invisibly. Among the sites it works on are Facebook, Twitter, Google Search, Wikipedia, Paypal, the New York Times, the Washington Post, and others. It works only when the sites themselves use the HTTPS protocol, and works only on a group of specific sites. So it won't protect you everywhere. And it won't protect you when you use other Internet services, such as an instant messaging client, or use client-based email such as Outlook."

Share this answer
Permalink

Answer this Question

Ask a question

Researchers find more versions of digitally signed Mac OS X spyware

Security researchers have identified multiple samples of the recently discovered "KitM" spyware for Mac OS X, including one dating back to December 2012 and targeting German-speaking users.

SoftBank said to be in talks with US to allay national security fears

The U.S. government is in negotiations with SoftBank for greater control over equipment purchases by Sprint Nextel and the selection of one of the Japanese company's nominee to the U.S. carrier's board, according to a news report.

Twitter aims to become safer with two-step sign-in

Twitter, in a much-needed move to keep its users safer from cyberattacks, is introducing a more secure login process.

Growing mobile malware threat swirls (mostly) around Android

Mobile devices are getting hit by a boom in malware similar to the one that hit PCs starting with the rise of the Web, a security software executive said Tuesday.

Blue Coat Systems to acquire security analytics firm Solera Networks

Blue Coat Systems, a provider of Web traffic filtering and business assurance products and services, plans to buy security analytics specialist Solera Networks, which uses data mining techniques to classify network traffic and detect potential security threats.

New Citadel malware variant targets Payza online payment platform

A new variant of the Citadel financial malware is targeting users of the Payza online payment platform by launching local in-browser attacks to steal their credentials, according to researchers from security firm Trusteer.

U.S. power companies under frequent cyberattack

A survey of U.S. utilities shows many are facing frequent cyberattacks that could threaten a highly interdependent power grid supplying more than 300 million people, according to a congressional report.

Bit9, FireEye, Palo Alto Networks team to hit zero-day malware

Bit9 has teamed with FireEye and Palo Alto Networks, which each have sandboxing technologies, in order to share information related to zero-day attack code.

Researchers find critical vulnerabilities in popular game engines

Security researchers found serious vulnerabilities in the engines of several popular first-person shooter video games that could allow attackers to compromise their online servers and the computers of players accessing them.

Why don't risk management programs work?

When the moderator of a panel discussion at the recent RSA conference asked the audience how many thought their risk management programs were successful, only a handful raised their hands. Why don't these programs work?