Can internet users protect themselves? Challenges and techniques of automated protection of HTTP communication

摘要: HTTPS enables secure access to web content and web-based services. Although supported by many service providers, is oftentimes not enabled default, as pointed out in an open letter sent Google security experts. In this article, we discuss if how users can protect themselves using instead of HTTP. We show that websites allow for accessing However, must be manually configured or requested the user, impossible at all, e.g., embedded objects. For reason, explore transparently automatically whenever possible. order enable approach, one needs determine whether yields same HTTP, even presence dynamic incorporating advertisements news. decision possible entire like amazon.com short time combining a fast comparison algorithm, result caching, observations on structure website. Besides concrete HTTP use case considered our results are independent interest any setting which accessed various means. Finally, present different approaches implementing automated protection connections.