Premium
This is an archive article published on August 3, 2016

Google: 97 per cent of YouTube connections encrypted

Google says more than 90 per cent traffic for both YouTube and Calendar is directed via HTTPS encrypted protocol.

Google says more than 90 per cent traffic for both YouTube and Calendar is directed via HTTPS encrypted protocol (Source: Google) Google says more than 90 per cent traffic for both YouTube and Calendar is directed via HTTPS encrypted protocol (Source: Google)

Google has added YouTube and Calendar to its Transparency Report, which details the transition to HTTPS encryption. Google says more than 90 per cent traffic for both YouTube and Calendar is directed via HTTPS encrypted protocol.

Google says it wasn’t easy to migrate the entire YouTube channel to HTTPS and it took search giant two years to fully implement the new encrypted protocol. Google says it even used hardware acceleration for AES to encrypt virtually all the video serving without deployment of additional machines. Google confirms that HTTPS is fast now.

With YouTube being accessible on every form factor one can think of, Google seems to have done split testing for YouTube on every device to ensure that there is no negative impact on user behaviour. Google says HTTPS improved the quality of experience on most devices. Google eliminated most types of streaming errors to ensured content integrity.

Story continues below this ad

Google now tracks insecure request made in a secure context and says it gets an alert when such request is made from any of the clients. Google ads on YouTube have used HTTPS encrypted protocol since 2014.

Google is further cutting down on HTTP to HTTPS redirects by using HTTP Secure Transport Security (HSTS0 on youtube.com. Google claims this method improves both security and latency for end users. Google’s HSTS lifetime is one year and it plans to preload this soon in web browsers.

Since some devices do not support modern HTTPS, YouTube seems to be stuck with just 97 per cent secure network. Google says all websites and apps should be protected with HTTPS – plans to reduce vulnerability.

Latest Comment
Post Comment
Read Comments
Advertisement
Loading Taboola...
Advertisement