
The other day, Google Inc. announced its intention to make the work of its services more secure, in terms of the safety of user data. The corporation has already made HTTPS the standard for such services of its company as Google+, Gmail, Google Docs and Google Apps. Now developers have made HTTPS even more secure by making it use two keys to encrypt data.
One key is dependent on the other, and as far as it can be understood, the key storage location is constantly changing. According to the developers, if one of the keys is decrypted by an attacker, it is unlikely that the second key will be decrypted. Firstly, it’s a long time, and secondly, every couple of months there is a change of keys. I would like to believe the developers who claim that it will take several years to decrypt any of the keys.
')
Among other things, the data is now encrypted in both directions - and in the direction towards the user, and in the opposite direction, from the user to the server. It is worth noting that encryption does not work for Internet Explorer, but it works for Mozilla Firefox and for Google Chrome. In order for the browser to support the new type of encryption, it must support the RC4 standard, and IE cannot work with RC4. Perhaps, they say in Google, support for this technology will be included in IE browser later.
The developers of the company report that the security of the Google services will continue to improve. The introduction of a new type of HTTPS was just made as part of the planned improvements. Now almost all services of the corporation work with the https standard. However, in some cases, all this must be enabled independently, by putting the appropriate "check mark" in the right place in the settings.
Via
generation-nt