Facebook Security: HTTPS Option
 

http://gawker.com/5744229/the-facebo...ly-as-possible

Facebook today is rolling out an option for a user to be signed into their entire session via a HTTPS connection. It is an option that you have to enable under Account->Account Settings->Account Security. I would highly recommend everyone enable this feature, especially if you travel frequently and are on open/public wifi networks. The setting should be rolled out to all users by the end of the day.

It sounds like this will be the default setting in a few weeks.

Almost 11:00 PM Eastern and I still don't have it.

Still nothing.

They clearly said it would be rolled out over few weeks!!!

It showed up for me the day they announced it. First time I've been first for a new Facebook feature. :)

I went looking for it on Thursday and it was there. It also allows you to set an alert anytime another machine logs into your account so you can know if somebody else is accessing it.

In case anybody is wondering, I've seen no decrease in speed because of the encryption.

You know, I've always heard SSL will slow things down but never experienced it. I suspect that SSL connections used to slow things down but that server hardware has gotten fast enough to deal with it. Of course, if you're Facebook and have a zillion incoming SSL connection requests at a time, that might be another story...

I think speed may have been an issue when a 256k connection was considered high speed and nobody had it, but now when connections are ten or twenty times faster, I think any difference is so small it can't be noticed.

it's also a nice way to surf fb at work ;)

Still not there for me.

Nothing for me either :confused:

The new HTTPS feature is live for me! ^^

Nothing for me yet.

Thanks! Just heard about this feature. :)

I did the steps, then logged out. It redirected me to the secure login page. Should work if you manually type in the url with https also.

OT I know, but you may be interested :) It's actually a bigger problem than before, because the processing power required increases as the link speeds increase. The move to more complex keys also adds further processing requirements.

Most big web-based systems have moved to hardware that offloads the SSL acceleration - either customized in-house solutions or industry standard solutions like this: http://www.f5.com/products/big-ip/ssl-acceleration.html