Youtube now supports HTTPS

Google has recently launched HTTPS support for youtube. https://www.youtube.com

 

@ TOMxEU

Thanks for the heads up

I noticed that HTTPS Everywhere listed it as buggy.



Maybe it's OK now ?

 

I have just read an article (not in english), that Google now fully supports HTTPS, you can also upload videos in HTTPS.

 

@ TOMxEU

OK thanks

 

Working good, would this defeat some ISP's throttling tactics I wonder?

 

It actually contains mixed content - https and http.

 

That's most likely the adverts, it actually works in your favour. Some browsers block unsecure content by default, so it's pretty much blocking the ads for you.

 

Actually, it's for:

-http://youtube-global.blogspot.com (and other sub-domains)
-http://code.google.com/etc...
-http://www.google.com/etc...

I don't know about the ads... I can't see any.

I access YouTube with a dedicated Chromium profile only allowing connections to *.youtube.com and *.ytimg.com.

-edit-

I missed some:

-http://gdata.youtube.com/feeds/base/etc...
-http://www.youtube.com/etc...

Well, according to the source code there are 20 http connections. Some may be repeated, though.

 

It turns out that, to watch the video, the content is loaded in http protocol. Check here https://www.wilderssecurity.com/showpost.php?p=1852185&postcount=3

I highly doubt this would defeat ISP's throttling tactics?

 

If that was true, when I browse to youtube with https the video would simply not load, because IE9 doesn't load unsecure content unless you allow it. Yet it does load, so the video is coming from a secure source.

 

Then, if you block access in your firewall to port 80 for process iexplore.exe, videos should still load. Could you try it?

As I explained in the other thread, my firewall was only allowing my Chromium Youtube profile to access protocol https. Videos wouldn't play. Allowing communication to protocol http allowed the videos to play. So, http is clearly involved here.

 

You're assuming the video came from the youtube domain or used a specific port?

 

I'm assuming it used port 80. Only allowing access to port 443 (https) will result in videos not playing. It appears the error message An error has occurred, please try again later.

Allow communication to port 80, will result in the videos playing.

 

I confirm m00nbl00d's finding.

(red line)

 

Seems you're right, from what I can see, the unsecure video is fetched from a secure script.



The entire thing is pointless then.

 

Wow. Https for yoo toob. The cesspool gets encrypted.

 

Momentary lapse from Google?

 

It's probably more that they don't care enough. Hence why they haven't made any official announcement about it or made an effort to stop the unsecure content being shown when using https.

 

Why the animosity over HTTP videos?

Your account is HTTPS encrypted, as well as most other parts of YouTube. That's good enough for privacy.

I think those videos need to be HTTP in order to be cached.

 

Why would Google provide Youtube in protocol https, in the first place? It makes no sense, at all.

As you well said, access to Youtube account is encrypted. All I can think of is that, Google wanted to give users privacy... but the question is: What privacy? -https://www.youtube.com also has http content, including the fetched videos.

What exactly was Google's aim? Entertainment to the mob?

 

No problems using youtube here!

 

To encrypt your account logins, I assume.

 

I think Boost and Mr. PC missed the point of this thread

Account logins are done on a secure Google page, so no, that would not be the reason. It's simply a flawed implementation.

 

Chill out, "dude"...
BTW, my Name is Mr.PC;not Mr. PC

 

Nope, I use my PC for what it was made for,not trying to figure this out and then this or that.