Facebook seeking encryption for apps, mobile
In response to complaints that a recent announcement of secure connections doesn't go far enough, Facebook said today that it's planning to roll out additional changes that would shield mobile devices and all apps from eavesdropping.
Last month, Facebook began offering the ability for users to turn on HTTPS (Hypertext Transfer Protocol Secure) to encrypt all communications with the site. However, F-Secure and others have noticed that some apps require users to switch to a regular HTTP connection to use the app, but don't warn users that the switch then becomes permanent.
Asked for comment, a Facebook representative said the company is working to make it so that the switch to unencrypted communications is only temporary and that Facebook is encouraging developers to write apps that support HTTPS.
