Bing now supports https • Hacker News Board

Re: Bing now supports https

#11

Post by alphex » Sat, Jan 11, 2014, 9:06 PM UTC

I saw this on twitter, and was confused. (Twitter removed the HTTPS in the url it shows... so now it makes sense.)

Re: Bing now supports https

#12

Post by ateevchopra » Sat, Jan 11, 2014, 9:09 PM UTC

finally my neighbour cannot see what i bing ! huh ?

Re: Bing now supports https

#13

Post by timrivera » Sat, Jan 11, 2014, 9:14 PM UTC

adamnemecek wrote: post #10

sp332 wrote: post #4

Earlier quoted context omitted.

They enabled TLS (HTTPS).

AFAIK, it worked for https://bing.com . It was enabled for https://www.bing.com .

Bing used to be hosted by Akamai, looks like they switched over their own edge network.

Also, https://bing.com just redirected to plain http, now you can actually search over https like with Google and DDG.

Re: Bing now supports https

#14

Post by fyrabanks » Sat, Jan 11, 2014, 9:14 PM UTC

digitalpacman wrote: post #3

northisup wrote: post #2

what?

I think he means finally they allow ssl?

https://www.howsmyssl.com/s/about.html#tls-vs-ssl

Re: Bing now supports https

#15

Post by T3RMINATED » Sat, Jan 11, 2014, 9:18 PM UTC

wow really who DOES NOT support HTTPS nowdays Bing is late. My Website even has HTTPs

Re: Bing now supports https

#16

Post by higherpurpose » Sat, Jan 11, 2014, 9:26 PM UTC

Don't forget to add PFS, Microsoft. And no NIST-corrupted curves, please.

Re: Bing now supports https

#17

Post by tptacek » Sat, Jan 11, 2014, 9:31 PM UTC

higherpurpose wrote: post #16

Don't forget to add PFS, Microsoft. And no NIST-corrupted curves, please.

In other words, don't use elliptic curves? And, therefore, don't use forward secrecy? Does current browser support for curves even allow you to set up a "NIST-free" ECDHE TLS server?

Re: Bing now supports https

#18

Post by d0ugie » Sat, Jan 11, 2014, 9:31 PM UTC

So, why stop short of implementing PFS? An oversight?

Re: Bing now supports https

#19

Post by nivla » Sat, Jan 11, 2014, 9:33 PM UTC

Issuer: "Microsoft Internet Authority"

Just like with Google: Google Internet Authority. Interesting to see big companies not trusting intermediate CA's anymore that they go through the length of becoming a CA themselves. However it could also be a cost effective strategy.

Re: Bing now supports https

#20

Post by dublinben » Sat, Jan 11, 2014, 9:42 PM UTC

nivla wrote: post #19

Issuer: "Microsoft Internet Authority" Just like with Google: Google Internet Authority. Interesting to see big companies not trusting intermediate CA's anymore that they go through the length of becoming a CA themselves. However it could also be a cost effective strategy.

With the amount of subdomains they use, and seeing as they each have a browser with significant market share, it's a no-brainer. I'm frankly surprised it took so long for them to bring such an essential security task in-house.