<html><body><span style="font-family:Verdana; color:#000; font-size:12pt;"><div><span style=""><i>"it is not forced upon them."</i></span></div><div><span style=""><i><br></i></span></div><div><span style=""><i><br></i></span></div><div><span style="">If the user doesn't ask for it, it is forced upon them.</span></div><div><span style=""><br></span></div><div><span style="">How many users ask for it, by the way?</span></div><div><span style=""><br></span></div><div><span style=""><br></span></div><div><span style=""><i><br></i></span></div>
<blockquote id="replyBlockquote" webmail="1" style="border-left: 2px solid blue; margin-left: 8px; padding-left: 8px; font-size:10pt; color:black; font-family:verdana;">
<div id="wmQuoteWrapper">
-------- Original Message --------<br>
Subject: Re: [anti-abuse-wg] Google Privacy Abuse<br>
From: Esa Laitinen <<a href="mailto:esa@laitinen.org">esa@laitinen.org</a>><br>
Date: Thu, March 14, 2019 7:53 pm<br>
To: ac <<a href="mailto:ac@main.me">ac@main.me</a>><br>
Cc: <a href="mailto:anti-abuse-wg@ripe.net">anti-abuse-wg@ripe.net</a><br>
<br>
<div dir="ltr"><div dir="ltr"><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Mar 14, 2019 at 6:05 AM ac <<a target="_blank" href="mailto:ac@main.me">ac@main.me</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">HTTPS protocol, by design, is secure and private. <br> <br> The average consumer expects this to be true.<br> <br> Google had to actually go and change, in an "under cover" way, the<br> entire way and method that HTTPS works. This "change" is being sold as<br> a "good thing" to poor people and/or people with low bandwidth and that<br> Google is doing a "good thing" by making this change.<br></blockquote><div><br></div><div>Dear Andre</div><div><br></div><div>The URLs you're accessing are also available for <br></div><div><br></div><div>- your ISP</div><div>- your VPN provider (unless you've rolled your own)</div><div>and some information is also potentially stored by</div><div>- your DNS provider</div><div></div><div><br></div><div>And Opera browser has been doing similar things when you've enabled the bandwidth savings.</div><div><br></div><div>or am I missing something?</div><div><br></div><div>OK. I'm ignoring here that this particular thingi is using MITM methods to do the optimization, which is for me a bit more worrying than google having access to the URLs I browse. They have them mostly anyway.</div><div><br></div><div>But, it is a choice a user makes, it is not forced upon them.</div><div><br></div><div><br></div><div>Yours,</div><div><br></div><div>esa<br></div><div><br></div><div><br></div><div> <br></div></div><div dir="ltr" class="gmail_signature"><div dir="ltr">-- <br><div>Skype: reunaesa</div><div>Yahoo: reunaesa</div><div>Mobile: +41<span style="color:rgb(0,0,0);font-family:Arial,Verdana,Helvetica,sans-serif;font-size:12px;line-height:14.4px">78 838 57 77 </span></div></div></div></div>
</div>
</blockquote></span></body></html>