Look for https://

Look for https://: a reader asks…

I’ve been reading about how Google is trying to force all websites to start using SSL and encrypting all data between my web browser and the website I’m visiting. Do you think this is important and why?

Yes, I think it’s very important that webmasters (those who craft and create websites for you to visit) take steps to protect you. Foremost is encrypting information passed between your web browser and their servers. This has always been vital for any website where you conduct financial transactions (online shopping, banking, etc.). It’s now become critical as well for just about anything you do online, since hackers don’t need to crack into your computer, but can simply monitor the data that flows across the internet and piece together the information they need to compromise your digital life.

You’ve probably seen social media websites transition to secure website access, as well as webmail service providers. Indeed, any website that uses any kind of username and password should be fully secured with Secure Sockets Layer (SSL) encryption. That’s evidenced by the all-important “s” in the website address (https://.. versus http://…). But it’s been fairly slow adoption for other websites, primarily because it’s more work (and cost) for the webmaster, and it slows down the speed at which web pages are displayed on your screen. But at this point, you should be keeping your eyes on the URL (website address) and use the lack of the “s” to determine whether you’ll provide any personal information to the site.

Why is this important? Hackers are busy and working hard to capture information about you. In addition to attempting to crack into your computer, hackers scan the internet for information. With the power of data mining (and upcoming Artificial Intelligence), hackers can grab tiny pieces of information and collate it into profiles on potential victims. It might take years, but over time hackers will have enough information about you to conduct identity theft, guess passwords and crack into your online accounts, and even steal your money.

So if you’re surfing around the internet and come across a site that isn’t secured with SSL, be very wary about what you do on that website. It’s ok to just read whatever text the website shows you, but don’t create an online account or provide them with any information about you. Even visiting unsecure websites will provide a certain measure of information about you, and that information can be used by anyone for anything. Information includes your geographic location, the computer address (IP address) your internet service provider assigned you, the type of web browser you’re using, and even information about the computer, tablet or smartphone you’re using. Of course, that information is captured by secure websites you visit as well, but it’s at least captured only by the webmaster of the site you’re visiting, and not by any hacker lurking on the internet and scanning data that passes.