Menu
Tumblr offers SSL option, but not default

Tumblr offers SSL option, but not default

To benefit from the added security users need to enable the SSL option in the account settings

Tumblr now allows users to encrypt their connections with the microblogging service, but the feature is only offered as an option for now.

"You can now take extra precaution against hackers and snoops by enabling SSL security on your Tumblr Dashboard," Conrad Rushing, Tumblr's director of security engineering, said Monday in a blog post. "Just head over to your Account Settings and flip the switch."

The adoption rate of HTTPS -- HTTP with SSL encryption -- by online services has increased rapidly over the past several years, driven in part by significant growth in the mobile market.

Many users today access online services primarily from their smartphones and tablets and these devices are frequently connected to public, insecure and generally untrusted wireless networks. This exposes them to man-in-the-middle attacks where attackers intercept Internet traffic and extract sensitive details from it like session cookies, which then allow them to hijack online accounts.

In addition, documents leaked last year by former U.S. National Security Agency contractor Edward Snowden revealed that intelligence agencies are collecting data about Internet communications from unencrypted traffic as it passes through the global Internet infrastructure. Those revelations have increased awareness about online privacy among users.

The revelations about the NSA's mass data collection programs prompted a commitment from Yahoo to provide users with the option to encrypt their traffic with the company's services by the end of the first quarter of 2014. The company made HTTPS a default setting for its email service at the beginning of January.

Yahoo acquired Tumblr in June 2013, but the company continues to be operated independently.

In a time when many popular online services are rushing to make HTTPS the default setting, or have done so already, Tumblr's decision to offer the feature on an opt-in basis strikes some as a bit unusual.

"The addition of SSL is surely better than plain old HTTP and makes sense especially when the user accesses the service via a mobile application," said Bogdan Botezatu, a senior e-threat analyst at security vendor Bitdefender, Tuesday via email. "However, SSL only makes sense if it is enabled by default, because the regular user won't likely alter the default account settings."

"We will eventually turn on this feature by default for all of our users, but to best handle the immense traffic produced by such an effort, we are beginning first by giving our users the ability to opt-in," said Katherine Barna, Tumblr's head of communications, via email.

"It's understandable why Tumblr decided to gradually roll out SSL to customers, as they probably expect to encounter some technological challenges, but the sooner they transition to SSL, the better for the users," Botezatu said.


Follow Us

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags data protectionYahooonline safetybitdefenderTumblr

Featured

Slideshows

The making of an MSSP: a blueprint for growth in NZ

The making of an MSSP: a blueprint for growth in NZ

Partners are actively building out security practices and services to match, yet remain challenged by a lack of guidance in the market. This exclusive Reseller News Roundtable - in association with Sophos - assessed the making of an MSSP, outlining the blueprint for growth and how partners can differentiate in New Zealand.

The making of an MSSP: a blueprint for growth in NZ
Reseller News Platinum Club celebrates leading partners in 2018

Reseller News Platinum Club celebrates leading partners in 2018

The leading players of the New Zealand channel came together to celebrate a year of achievement at the inaugural Reseller News Platinum Club lunch in Auckland. Following the Reseller News Innovation Awards, Platinum Club provides a platform to showcase the top performing partners and start-ups of the past 12 months, with more than ​​50 organisations in the spotlight.​​​

Reseller News Platinum Club celebrates leading partners in 2018
Meet the top performing HP partners in NZ

Meet the top performing HP partners in NZ

HP has honoured its leading partners in New Zealand during 2018, following 12 months of growth through the local channel. Unveiled during the fourth running of the ceremony in Auckland, the awards recognise and celebrate excellence, growth, consistency and engagement of standout Kiwi partners.

Meet the top performing HP partners in NZ
Show Comments