Google Encrypts All Traffic To blogs On Blogspot

Google has decided to encrypt all traffic to the blogs on its own Blogspot blogging service. In September last year the Internet giant began offering the option for bloggers to activate it yourself. This option has now been removed and traffic to all blogs are now encrypted.

There is also a new option available for bloggers called "HTTPS Redirect", making it possible to enable all visitors to the HTTP version of the blog visit automatically redirected to the https version. In case the option is disabled, it is possible to visit the blog via both http and https. Google warns however for mixed content that may not work properly the https version of the blogs.

It is in this case content such as images, gadgets, ads or templates that are invoked via http. In the case of an https site may cause a mixed content warning. Google argues that it can solve many of these problems, but some must be resolved by the bloggers themselves. To help bloggers and administrators with this, there is now a special tool launched to find mixed content into blogs and posts.

Google Will Support HTTPS For Blogspot

Owners of a blog on Google can now set HTTPS, so that traffic to and from the blog is encrypted. That Google has announced. The Internet giant has in recent years more and more services HTTPS enabled, but not for the popular blog platform Blogspot.

That is about to change. For blogs can enable encryption are important because, according to Jo-el Bergen, software engineer at Google Security. HTTPS can define users as to whether they are on the right website and not redirected to a malicious site. There may also be detected via HTTPS or an attacker to manipulate the data that is sent from Blogspot to a visitor, says Van Bergen.

HTTPS is not immediately available automatically to all Blogspot users, and will be gradually rolled out. Bloggers can Enable all myself. It only applies to blogs here, which are accessible via the domain of Blogspot. Bloggers who use their own domain name will be later supported. Bloggers do get a warning that after enabling HTTPS certain things may not work as templates, gadgets or content. It often matters that are offered via HTTP. To set a good example Google is now also a number of own blogs to move HTTPS.

Google disables 39,000 WordPress sites for malware

Google has already put more than 39,000 Wordpress websites on a blacklist because they are infected with malware. Attackers use a leak in the WordPress Slider Revolution Premium plug-in attempts to infect to get access to the sites and then add malicious code that visitors with malware. The leak in the plug-in has long been known, and a patch is available. Many sites that have not been installed.

According to security firm Sucuri involves three different campaigns where the SoakSoak campaign is responsible for most infections. According to Google, the malware of this website to over 17,000 detected domains. Through the wpcache blogger campaign are spacious 12,000 sites have come to the blacklist of the search giant. Finally, there is an IP address that the attackers and code to 8500 was found websites.

Once Internet users to visit these Web sites via eg Google Chrome or Firefox they'll see a warning. Sucuri Commission on the basis of own research that more than 50,000 websites have been infected, but they have not all been indexed by Google.

Affected websites are advised to do a "complete cleaning" of the website, since installing WordPress alone is not enough again. The attackers would in fact leave too many backdoors. Additionally WordPress administrators are urged to update their plugins. With over 74 million websites WordPress is the most popular online content management system.