Bing now supports https

For some context:<p><a href="https://news.ycombinator.com/item?id=5576041" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=5576041</a> (8 months ago)<p><a href="https://news.ycombinator.com/item?id=6937686" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=6937686</a> (1 month ago)<p><a href="http://www.zdnet.com/bing-is-fine-insecure-as-ever-but-fine-7000014285/" rel="nofollow">http:&#x2F;&#x2F;www.zdnet.com&#x2F;bing-is-fine-insecure-as-ever-but-fine-...</a> (April 2013)<p>&gt; Bing has never supported secure connections...

Issuer: &quot;Microsoft Internet Authority&quot;<p>Just like with Google: Google Internet Authority. Interesting to see big companies not trusting intermediate CA&#x27;s anymore that they go through the length of becoming a CA themselves. However it could also be a cost effective strategy.

They get an A from Qualys (yay?): <a href="https://www.ssllabs.com/ssltest/analyze.html?d=bing.com" rel="nofollow">https:&#x2F;&#x2F;www.ssllabs.com&#x2F;ssltest&#x2F;analyze.html?d=bing.com</a><p>… but no PFS :&#x2F;

So, why stop short of implementing PFS? An oversight?

Don&#x27;t forget to add PFS, Microsoft. And no NIST-corrupted curves, please.

Next step: enable perfect forward secrecy :)

no document.referrer. So this is untrackable. I think it&#x27;s a shame, search engines should pass a referrer and hide searched term for privacy.

I saw this on twitter, and was confused. (Twitter removed the HTTPS in the url it shows... so now it makes sense.)

The SafeSearch setting isn&#x27;t saved on https. Did they even test this thing before pushing it out?

They didn&#x27;t yet?!

finally my neighbour cannot see what i bing ! huh ?

Good to see Microsoft making progress on this!

Wow… I wasn&#x27;t waiting for anything else.

what?