Hacker News new | ask | show | jobs
by Pica_soO 3667 days ago
Google is not fully https - its the road customer<-> google that is fully https - internal traffic is not encrypted. And internal traffic goes worldwide for google.
2 comments

Google's internal traffic is (supposedly¹) encrypted as of 2013.

¹ I have no reason to doubt this is true, but AFAIK the only evidence is that Google said it would be, in response to NSA/GHCQ's MUSCULAR program.

I don't know if it still works, but Google used to support network providers force non-ssl searches using DNS poisoning. BT's WiFi offering used to do this, which is one of the reasons I stopped using it.