HTTPS encryption increased for Gmail and Google+

Google already offers HTTPS as default for Gmail and encrypted search. Google has now moved on and is now enabling “forward secrecy” by default. Forward secrecy (or PFS) ensures that a session key cannot be compromised if a long term private key is compromised in the future. What this means is, forward secrecy doesn’t allow persistent stored private keys to be used for connections and helps stop hackers (using ECDHE encryption) from snooping on your HTTPS network connection.

If a private single key is broken a hacker will be unable to decrypt your connection history – in fact it makes it almost impossible to decrypt HTTPS sessions. Google is planning ahead because in the future computer systems will be much faster and could break a servers private key and decrypt email traffic. As for supporting TLS 1.1/1.2 Google says not right now but plans too in the future. Read more…

You must be logged in to post a comment