Interesting difference between HTTPS versions of Google
Posted: Sun Jun 17, 2012 11:35 am
If you think that your search terms get not exposed to a target site if you click on a http link in https Google since the referer gets not sent then you might be wrong, at least in the case of ads on www.google.com, instead of encrypted.google.com:
And here the obligatory link to the RefControl add-on.
http://curtisfree.com/blog/2012/01/13/n ... _are_equalhttps://www.eff.org/deeplinks/2011/10/google-encrypts-more-searches wrote:There is one small caveat that users should be aware of with the new encrypted-when-logged-in Google. If you click on an advertisement, and the advertiser's website is HTTP rather than HTTPS, Google will send the search terms for that specific query to the advertiser over HTTP. The encrypted.google.com domain will continue to exist and will not have that behavior: on that domain, advertisers only get to see the search that lead to a click-through if they use HTTPS.
And here the obligatory link to the RefControl add-on.