On: Say goodbye to search analytics

[raspie]

Everyone assumes that SSL search will be ever turned on by default (seems unlikely). I think it would be most natural to make SSL search opt-in. Anyone who cares about his/her privacy will be able to turn it on and webmasters will still have most of the data they need.

[rubinelli → raspie]

My thoughts, exactly. Why would they use more resources and slow down page load for users who couldn't care less?

[tptacek → rubinelli]

Because most users don't know enough to make an informed decision, and SSL is the conservative choice?

[litewulf → rubinelli]

They made Gmail default to HTTPS, and the same argument could apply for both.

[Rubenb → litewulf]

Emails are rather more sensitive than search terms though.

[tptacek → Rubenb]

Strong disagree.

[rbranson → tptacek]

So search terms regularly contain highly sensitive things like password reset verifications for your online banking?

[tptacek → rbranson]

No, they simply regularly contain highly sensitive things. Not password reset verifications.