Why do I need https searches?

Since this morning Google has been defaulting to Google SSL when using IE9, but not on Chrome, I really wonder why...

Perhaps they are assuming that all IE9 users are searching for p0rn and don't want hackers to know?

Herbie

I am assuming they don't want bing to know

How is that gonna be different? https only protects from man-in-the-middle attacks. If the hacker corrupted the client machine, which is a typical case, then, anything on the screen can be read and altered.

What do you mean by "Google"? Search? I can't reproduce that. Google did mention recently that all Google APIs would enforce SSL, but which browser you use should have no effect on that.

@CKurt: yes, particularly, no more picture link (at least I can't see it).

@wkempf: Not sure why or how, but google.com always loads as https on IE9 while on Chrome it does not (same machine).

Strange. I really can't repro. Going directly to http://www.google.com works. Searching on that page doesn't change to https. Using the IE9 search bar (what ever the new name of the combo bar is) with Google as the provider searches Google using http not https. So, it's not likely an IE thing, but what would cause it to behave that way for you is the question. I assume a redirect on the part of Google, but why?

@wkempf: I confirm I cannot repro on another computer either, but I can on my own. Strange.

By the way, is what Magicaclick says right, that even with https the Bing bar or Suggested sites could "see" google searches?

They can see the URI requested and the results sent back, yes. Any browser plugin has this capability.

@wkempf: What is the point then of https searches? Is it very likely that someone will spy on my searches?

P.S. back on my work machine, my IE is still defaulting to https and I can't see the image search button...

https only encrypts over the wire. So, yes, the point is to prevent someone from watching your search traffic as it goes over the wire. As for if there's a need to encrypt searches... well, I guess that would depend on what you're searching for, though it seems dubious to me.

SSL also protects your cookies. If you're logged on with your Google-account, it will be more difficult for hackers to hijack your session if everything happens over SSL. And if a hacker hijacks your session, he has complete access to your Google-account, your e-mails, your contacts, Google Docs, ...

2 hours ago, TommyCarlier wrote

SSL also protects your cookies. If you're logged on with your Google-account, it will be more difficult for hackers to hijack your session if everything happens over SSL. And if a hacker hijacks your session, he has complete access to your Google-account, your e-mails, your contacts, Google Docs, ...

That makes much more sense, in fact with my e-mail account I think you could pretty much take ownership of anything I own, inlcuding my bank account

12 hours ago, giovanni wrote

@wkempf: What is the point then of https searches? Is it very likely that someone will spy on my searches?

P.S. back on my work machine, my IE is still defaulting to https and I can't see the image search button...

It protects you from Man-in-the-middle attacks. Just read wiki about what it is.

Or in easy sense, you send a note across the classroom, and only you and that girl can read it, but, no one else. Even if the teacher caught it and trying to read it, the teacher will only see gibberish. And the teacher cannot pretend to be you and send hate letter to your girl.

This does not protects you if someone hacked into your brain and looking at what you are doing. Meaning, this does not protects you from Charles Xavier in x-man.

@Larry Osterman: That's hardly impressive.  I'd just guess p*rn and be right like 80% of the time.