Interesting difference between HTTPS versions of Google

[dhouwn]

If you think that your search terms get not exposed to a target site if you click on a http link in https Google since the referer gets not sent then you might be wrong, at least in the case of ads on www.google.com, instead of encrypted.google.com:

There is one small caveat that users should be aware of with the new encrypted-when-logged-in Google. If you click on an advertisement, and the advertiser's website is HTTP rather than HTTPS, Google will send the search terms for that specific query to the advertiser over HTTP. The encrypted.google.com domain will continue to exist and will not have that behavior: on that domain, advertisers only get to see the search that lead to a click-through if they use HTTPS.

http://curtisfree.com/blog/2012/01/13/n ... _are_equal

And here the obligatory link to the RefControl add-on.

[therube]

I was confused?
Not sure if https://www.google.com is actually different (now, perhaps) from https://encrypted.google.com ?

[Thrawn]

I was confused?
Not sure if https://www.google.com is actually different (now, perhaps) from https://encrypted.google.com ?

I believe encrypted.google.com is better (doesn't expose search terms over http). startpage.com is even better .

[GµårÐïåñ]

I would trust Google as far as I can throw them even if they told me that they are encrypted and withholding everything. This is a company that makes money to do just the opposite. Use something else, startpage is great since they crippled and blocked duckduckgo and scroogle. Let's see how long before they block them too, if they care about your privacy, then why block anyone?