Google Chrome 25 Will Serve Searches Over SSL From the Omnibox For All Users

An anonymous reader writes "Google on Friday announced yet another security improvement for Chrome 25. In addition to killing silent extension installation, the omnibox in Google's browser will send all searches over a Secure Sockets Layer (SSL) connection. Chrome already does this for users who are signed in to Google: when they search from the address bar, their queries are sent over HTTPS. As of Chrome 25, however, the same will happen for users who aren't signed in to Google."

Re:Great

[Anonymous Coward]

Not like that other internet site that sells everything about you except your underwear to the highest bidder, and forces you to use your real name for everything.

I think you mean to imply that Google do in fact sell information about you and I don't think there's any evidence of that. They gather as much info as they can, they use it and aim to profit from it by advertising to you - and that may be bad enough - but as far as I can tell they don't sell it to anyone else, rather they hoard it and preserve it as their own goldmine. Am I wrong?

Re:Version 25???

[markdavis]

1) Chrome is not open source. It is based on Chromium, which is open sourced, but the build Google takes is not identical code. They can put anything in it they wish.

2) Fiddler is a proxy, as such, the browser will know it is not directly connected.

3) Even if one could capture all data as it would normally travel, it doesn't mean one would be able to understand everything it sends. If a blob of data goes to Google at some point, especially when already connecting to their servers with every other page doing adsense, exactly how are we mere, non-Google mortals going to know it is all above-the-board?

4) Again, RLZ might be open source, but their COMPILE of CHROME that contains it is not... so what you see might not be what you get. Open-source projects, like Firefox, Linux, OpenOffice, etc, are examined and compiled by third parties and not primarily distributed as a owner/maker binary. Even Chromium seems to be obfuscated in ways that make it unsuitable for others to compile and distribute: http://ostatic.com/blog/making-projects-easier-to-package-why-chromium-isnt-in-fedora [ostatic.com]

I am not saying Chrome *is* spyware. But I am saying it has the ability to be, and it might be, and we can't really know. It is being released by a company who has a lot to gain by gathering as much info as possible, and a lot of practice doing so (and a huge, unquestioning following).

Re:DuckDuckGo

[jones_supa]

For a couple of weeks I tried being a DuckDuckGo rebel, but the search results were so often so much worse than of Google's that it eventually just got too clunky.