[raquo]

Everyone assumes that SSL search will be ever turned on by default (seems unlikely). I think it would be most natural to make SSL search opt-in. Anyone who cares about his/her privacy will be able to turn it on and webmasters will still have most of the data they need.

[rubinelli]

My thoughts, exactly. Why would they use more resources and slow down page load for users who couldn't care less?

[tptacek]

Because most users don't know enough to make an informed decision, and SSL is the conservative choice?

[litewulf]

They made Gmail default to HTTPS, and the same argument could apply for both.

[Rubenb]

Emails are rather more sensitive than search terms though.

[tptacek]

Strong disagree.

[rbranson]

So search terms regularly contain highly sensitive things like password reset verifications for your online banking?

[tptacek]

No, they simply regularly contain highly sensitive things. Not password reset verifications.