{"id":200300,"date":"2017-02-25T08:00:45","date_gmt":"2017-02-25T06:00:45","guid":{"rendered":"http:\/\/mybroadband.co.za\/news\/?p=200300"},"modified":"2017-02-25T07:06:01","modified_gmt":"2017-02-25T05:06:01","slug":"half-of-internet-traffic-is-protected-by-https-eff","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/internet\/200300-half-of-internet-traffic-is-protected-by-https-eff.html","title":{"rendered":"Half of Internet traffic is protected by HTTPS – EFF"},"content":{"rendered":"

The following piece is from the EFF Deeplinks Blog<\/strong><\/a>.<\/em><\/p>\n

The movement to encrypt the web<\/a> has reached a milestone. As of earlier this month, approximately half of Internet traffic is now protected by HTTPS.<\/p>\n

In other words, we are halfway to a web safer from the eavesdropping, content hijacking, cookie stealing, and censorship that HTTPS can protect against.<\/p>\n

Mozilla recently reported that the average volume of encrypted web traffic on Firefox now surpasses<\/a> the average unencrypted volume.<\/p>\n

\n
\"Firefox<\/a><\/div>\n<\/div>\n

Google Chrome\u2019s figures on HTTPS usage<\/a> are consistent with that finding, showing that over 50% of of all pages loaded are protected by HTTPS across different operating systems.<\/p>\n

\n
\"Chrome<\/a><\/div>\n<\/div>\n

This milestone is a combination of HTTPS implementation victories: from tech giants and large content providers, from small websites, and from users themselves.<\/p>\n

Advocating for HTTPS Migration in Industry<\/h3>\n

Starting in 2010<\/a>, EFF members have pushed tech companies to follow crypto best practices.<\/p>\n

We applauded when Facebook<\/a> and Twitter<\/a> implemented HTTPS by default, and when Wikipedia<\/a> and several other popular sites<\/a> later followed suit.<\/p>\n

Google has also put pressure on the tech community by using HTTPS as a signal<\/a> in search ranking algorithms and, starting this year, showing security warnings<\/a> in Chrome when users load HTTP sites that request passwords or credit card numbers.<\/p>\n

EFF\u2019s Encrypt the Web Report<\/a> also played a big role in tracking and encouraging specific practices.<\/p>\n

Recently other organizations have followed suit with more sophisticated tracking projects. For example, Secure the News<\/a> and Pulse<\/a> track HTTPS progress among news media sites and U.S. government sites<\/a>, respectively.<\/p>\n

Let\u2019s Encrypt and Certbot Change the Game<\/h3>\n

But securing large, popular websites is only one part of a much bigger battle. Encrypting the entire web requires HTTPS implementation to be accessible to independent, smaller websites.<\/p>\n

Let\u2019s Encrypt<\/a> and Certbot<\/a> have changed the game here, making what was once an expensive, technically demanding process into an easy and affordable task for webmasters across a range of resource and skill levels.<\/p>\n

Let\u2019s Encrypt is a Certificate Authority (CA) run by the Internet Security Research Group (ISRG) and founded by EFF, Mozilla, and the University of Michigan, with Cisco and Akamai as founding sponsors.<\/p>\n

As a CA, Let\u2019s Encrypt issues and maintains digital certificates that help web users and their browsers know they\u2019re actually talking to the site they intended to. CAs are crucial to secure, HTTPS-encrypted communication, as these certificates verify the association between an HTTPS site and a cryptographic public key.<\/p>\n

Through EFF\u2019s Certbot<\/a> tool, webmasters can get a free certificate from Let\u2019s Encrypt and automatically configure their server to use it.<\/p>\n

Since we announced that Let\u2019s Encrypt was the web\u2019s largest certificate authority<\/a> last October, it has exploded from 12 million certs to over 28 million. Most of Let\u2019s Encrypt\u2019s growth has come from giving previously unencrypted sites their first-ever certificates.<\/p>\n

A large share of these leaps in HTTPS adoption are also thanks to major hosting companies and platforms–like WordPress.com, Squarespace, and dozens of others<\/a>–integrating Let\u2019s Encrypt and providing HTTPS to their users and customers.<\/p>\n

How Users Can Protect Themselves<\/h3>\n

Unfortunately, you can only use HTTPS on websites that support it–and about half of all web traffic is still with sites that don\u2019t. However, when sites partially support HTTPS, users can step in with the HTTPS Everywhere<\/a> browser extension.<\/p>\n

A collaboration between EFF and the Tor Project<\/a>, HTTPS Everywhere makes your browser useHTTPS wherever possible. Some websites offer inconsistent support for HTTPS, use unencrypted HTTP as a default, or link from secure HTTPS pages to unencrypted HTTP pages.<\/p>\n

HTTPS Everywhere fixes these problems by rewriting requests to these sites to HTTPS, automatically activating encryption and HTTPS protection that might otherwise slip through the cracks.<\/p>\n

More Work to Do<\/h3>\n

Our goal is a universally encrypted web that makes a tool like HTTPS Everywhere redundant. Until then, we have more work to do.<\/p>\n

Protect your own browsing and websites with HTTPS Everywhere and Certbot, and spread the word to your friends, family, and colleagues to do the same. Together, we can encrypt the entire web.<\/p>\n

EFF<\/a><\/p>\n

Now read:\u00a0Cloudbleed \u2013 Massive bug leaks private data from Cloudflare<\/a><\/h3>\n","protected":false},"excerpt":{"rendered":"

The movement to encrypt the web has reached a milestone.<\/p>\n","protected":false},"author":23,"featured_media":162888,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_facebook_post_id":"","_sma_instagram_post_id":"","_sma_threads_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[18,27],"tags":[21797,35,20789],"class_list":["post-200300","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-internet","category-security","tag-eff","tag-headline","tag-hypertext-transfer-protocol-secure-https"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/200300"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/23"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=200300"}],"version-history":[{"count":1,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/200300\/revisions"}],"predecessor-version":[{"id":200306,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/200300\/revisions\/200306"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/162888"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=200300"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=200300"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=200300"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}