Facebook to enable site-wide HTTPS and name-that-face social authentication
Tomorrow, as part of Data Privacy Day, Facebook will enable the option for site-wide HTTPS. Everything, from sending messages to stalking your friends' profiles will be encrypted, which should come as a great relief if you regularly use Facebook from public, unencrypted Wi-Fi networks. To enable it (tomorrow!), navigate to Account Settings and scroll down to Account security.
Facebook will also step up its policing of suspicious activity by using an exciting new form of CAPTCHA called "social authentication." If Facebook detects something odd with your account -- such as a login from two geographically disparate locations -- you will be asked to identify some of your friends. The idea is that hackers might have worked out your password, but they probably don't know what your friends look like. Unless you're being hacked by one of your friends, of course...
Looking forward, Facebook hopes to enable HTTPS by default, but no exact timeline is given. Incidentally, if you want to browse the entire Web while secured by HTTPS, check out our secure surfing guide.
Facebook will also step up its policing of suspicious activity by using an exciting new form of CAPTCHA called "social authentication." If Facebook detects something odd with your account -- such as a login from two geographically disparate locations -- you will be asked to identify some of your friends. The idea is that hackers might have worked out your password, but they probably don't know what your friends look like. Unless you're being hacked by one of your friends, of course...
Looking forward, Facebook hopes to enable HTTPS by default, but no exact timeline is given. Incidentally, if you want to browse the entire Web while secured by HTTPS, check out our secure surfing guide.













Comments
5
Subscribe to commentsmotangJan 27th 2011 11:27AM
Don't have it yet, but that's good Facebook is enabling that. I will surely check mark it once I have access to it.
MedlirJan 27th 2011 2:43PM
https sounds cool.
Social authentication sounds like it'll be fraught with problems. What happens to people with thousands of supposed "friends" who don't actually know or recognize most of them? How about friends who change their pictures to junk images in "support" of various causes/chain messages/urban legends? Or people who don't use their actual picture in the first place, and instead use favorite TV show images, movie characters, etc?
AaronJan 27th 2011 3:16PM
@Medlir
I probably shouldn't say it, but I needed to log into my then-girlfriend's account (legit reason) and was made to complete this 'click on pictures of friends you know' authentication method. God, did I pass ridiculously easily. I was also made to do it when I moved over here, as it was a new location.
Sebastian AnthonyJan 27th 2011 7:32PM
@Medlir Good point, re: using photos that aren't of your face!
I bet it locks you out if you get it wrong, too...
just meFeb 4th 2011 8:30PM
Since I have 2000 people in my mafia and don't know all of my friends personally..that may not come in handy for me.