In the wake of revelations about the National Security Agency's ability to broadly capture, index, and search the contents of unencrypted Web traffic, the Wikimedia Foundation is speeding up efforts to use secure Hypertext Transfer Protocol (HTTPS) by default for site visitors and editors for Wikipedia and other Wikimedia projects. But users will need to have accounts on the foundation's sites to get that protection.
"Recent leaks of the NSA’s XKeyscore program have prompted our community members to push for the use of HTTPS by default for the Wikimedia projects," Wikimedia Foundation operations director Ryan Lane said in a blog post on August 1. "Thankfully, this is already a project that was being considered for this year’s official roadmap, and it has been on our unofficial roadmap since native HTTPS was enabled."
The XKeyscore program allows the NSA to perform searches against recent Internet traffic to find a variety of data, including the raw HTTP requests made by users. These data could encompass searches on sites, content posted to those sites, and other interactions with Web pages not secured by encryption. While sites such as Google and Facebook offer connections over HTTPS as an option (Google uses it by default when users are logged in, and Facebook turned on default HTTPS just one day ago), most sites on the Internet don't use HTTPS for a variety of technical reasons—including hosting configurations, increased server-side processing requirements, and the use of third-party services that fail under HTTPS. That means that traffic to most websites can be captured by XKeyscore's packet capture system.
Read 1 remaining paragraphs | Comments
