Google Encrypted Search Moved to New Hostname to Address Concerns from Schools

http://googleenterprise.blogspot.com/2010/06/update-on-encrypted-web-search-in.html

by qjz • 16 years ago

13 24 16 years ago

googleenterprise.blogspot.com

ars6• 16 years ago

If I understand this correctly, https://www.google.com should redirect to https://encrypted.google.com - except it doesn't.

So I don't really understand what they did here.

qjz4• 16 years ago

Apparently, the login for Google Docs is within https://www.google.com/, so they can't simply redirect the entire domain.

ars6• 16 years ago

I figured they would just redirect the homepage and the search pages. (The search pages actually are redirected.)

bretthoerner• 16 years ago

It redirected me to http://google.com/, so I'd have to go to encrypted.google to do an SSL search.

Did it return a 200 to you for https://google.com/?

mattmillr• 16 years ago

It doesn't redirect on the search page, but the results pages are located at https://encrypted.google.com.

ars6• 16 years ago

Ah! Thanks.

But the search suggestions use https://clients1.google.com/ and google should let schools know that block that as well. (Or maybe schools block all https except known good ones?)

chengas123• 16 years ago

It sounds to me from the blog post that the change hasn't been made yet.

We’re working hard to address this issue as quickly as possible and in a few weeks we will move encrypted search to a new hostname – so schools can limit access to SSL search without disrupting other Google services, like Google Apps for Education.

coin2• 16 years ago

So Google made this change to accommodate the schools' inability to filter based on host and https mode. And some of the schools' solution was to block https all together. Basically the schools' filtering is lame, so Google (in the interest of doing things right) solves this by tweaking their side.

qjz4• 16 years ago

Unfortunately, Google didn't have much of a choice. However incompetent or misguided the schools' reaction to blocking encrypted search, it immediately broke Google Docs (and possibly other resources) for many of them. Google probably can't afford to give up this foothold, or to appear unreliable. The schools aren't upset at the existence of encrypted search, they just want a dead easy way to block it on their networks.

stanleydrew2• 16 years ago

Seems like they could have fixed Google Docs then. I thought Docs was at https://docs.google.com/ anyway?

ars6• 16 years ago

Schools block ALL encrypted traffic. Not to do so makes the firewall almost totally pointless.

Presumably schools whitelisted specific sites to allow https, and google was one of them, until it became a problem.

stanleydrew2• 16 years ago

It does seem pretty weird that Google would make a change like this that effects everyone just to appease some schools that can't figure out how to properly configure their firewalls.

ars6• 16 years ago

And how exactly should they configure their firewalls?

It's not possible to do that. The firewall has no idea what's being communicated because it's encrypted!

dedward• 16 years ago

They did it because it was the easiest way for google to make it easy to filter out encrypted search without breaking their other services. A very simple change for google -vs- a very difficult firewall configuration for a network administrator. (You can't just block https://www.google.com/ without breaking a whole bunch of other services you may want to be using) (and you probably don't have the budget & manpower to deploy the type of network you would need to scan & filter HTTPS traffic as an organization if you are a school, either)

kleiba• 16 years ago

I don't understand - why do some schools block encrypted search?

yummyfajitas• 16 years ago

Schools wish to prevent students from accessing certain information. Encrypted search could allow such students to escape detection/punishment if they access that information anyway.

r3570r32• 16 years ago

because students try and access blocked content using https, and it is not just for Google. Most blocked websites can be accessed thorough https if supported.

r3570r32• 16 years ago

This is the exact reason I hate blacklisting and sense technologies they use in schools and companies. Why not use a proper Firewall else that messing up with DNS entries!

Google Encrypted Search Moved to New Hostname to Address Concerns from Schools

Related Stories