Abrowser - DuckduckgoSSL
- Anmelden oder Registrieren um Kommentare zu schreiben
The link below tells that duckduckgo uses HTTPS/SSL by default but still I find two different options at search bar of Abrowser - duckduckgo and duckduckgo(SSL). Is duckduckgo(SSL) still recommended?
https://duck.co/blog/https-on-by-default
| Anhang | Größe |
|---|---|
| Screenshot from 2014-06-23 12:25:01.png | 148.94 KB |
If you search for "hindi" using http you get redirected to the https version, but not before revealing what you were searching for. Your internet provider can tell that you searched for "hindi", but also all the routers that your http request travels through can associate your IP with the search query.
If you use HTTPS from the start the only thing that you reveal is that you visited the website, and the "hindi" query is not revealed.
Thank you! Thabks a lot.
I am a translator!
The recommended DuckDuckGo search is via the lite version which works without (non-free) JavaScript.
https://duckduckgo.com/lite/
If you visit this website you can add it to the search bar (just select "Add DuckDuckGo (lite)").
I like the way they named the button 'Quack' instead of 'Go' or 'Search'.
No matter how things are with the search engine, you should have HTTPS Everywhere[1]. Than the requests are rewritten, if possible, for HTTPS. A much better solution is to have the site default to HTTPS. And there are a few techniques to do that. But the tech guys don't seem to like the HTTPS idea.
Why is it so? And I find many websites of free softwares listed in their list of affected websites like gnu.org. Does it cause any major performance issue?
I don't know. Most guys in IT feel they should have done something else in life. Me too when I listen to their stories. On the other job, security is a full time job. You have to read books. You have to care. The admins I know are rather bodyguards for the rack.
I installed the add-on and it works well but when I clicked the link to FSF India's website from gnu.org it loaded as normal http page intead of https. I could not get to the page directly by typing gnu.org.in.
Are you sure that is a legitimate site? I went there and it printed:
> Neither /etc/wordpress/config-gnu.org.in.php nor /etc/wordpress/config-org.in.php could be found.
> Ensure one of them exists, is readable by the webserver and contains the right password/username.
http://www.fsf.org.in is the website of the FSF India (as linked from gnu.org).
Sorry for that mistake. Anyway, the point is that it appears with the globe sign on the address bar instead of the lock that is seen with https pages.
I don't think that website supports https. If you try going to https://fsf.org.in you get an error.
- Anmelden oder Registrieren um Kommentare zu schreiben