Yahoo fully encrypts traffic between data centers, while encrypted Yahoo Messenger is coming soon
After finding themselves in the NSA's target list, Yahoo! and Google forced to think hard about the security and privacy of its users. Google had replied back to the NSA in its own way by encrypting itsĀ GmailĀ service between the companyās dataĀ centers to make sure that its usersā personal information is safe from the prying eyes.
- now it encrypts traffic between its data centers to help protect its users from mass surveillance.
- turned on encryption for mail delivery between Yahoo Mail and other email services that support it, like Gmail, support the SMTP TLS standard has been enabled.
- The Yahoo homepage and all search queries will now also run withĀ httpsĀ encryption enabled by default.
[adsense size='1']
Even if the government taps data cables; it won't be able to read your messages. āWe implemented the latest in security best-practices, including supporting TLS 1.2, Perfect Forward Secrecy and a 2048-bit RSA key for many of our global properties such as Homepage, Mail and Digital Magazines,ā Alex Stamos, Chief Information Security Officer, said in aĀ blog post.
ENCRYPTED YAHOO MESSENGER.. Coming soon
In the meantime, a fully encrypted version of Yahoo Messenger will land soon to protect users from snooping. Late in February this year, Snowden revealed about project āOptic Nerveā, under which US Spy agency NSA helped British Spy Agency GCHQ to allegedly capture and store nude images and others from webcam chats of millions of unsuspecting Yahoo users.
[adsense size='1']
āOur goal is to encrypt our entire platform for all users at all time, by default,ā saidĀ Alex Stamos.Ā āOur fight to protect our users and their data is an on-going and critical effort,ā
Additional upcoming security measuresĀ taken by Yahoo include implementation of HSTS (HTTP Strict Transport Security) to ensure that web browsers are using only secure HTTPS communication, Perfect Forward SecrecyĀ to generate unique keys for each user session that prevents users from session hijacking attacks, and CertificateĀ Transparency.
[adsense size='2']
āWe will continue to work hard to deploy the best possible technology to combat attacks and surveillance that violate our usersā privacy.ā he added.
Gloss