The EFF recently released their Encrypt The Web report and included the cool infographic above.
We’ve asked the companies in our Who Has Your Back Program what they are doing to bolster encryption in light of the NSA’s unlawful surveillance of your communications. We’re pleased to see that four companies—Dropbox, Google, SpiderOak and Sonic.net—are implementing five out of five of our best practices for encryption. In addition, we appreciate that Yahoo! just announced several measures it plans to take to increase encryption, including the very critical encryption of data center links, and that Twitter has confirmed that it has encryption of data center links in progress. See the infographic.
By adopting these practices, described below, these service providers have taken a critical step towards protecting their users from warrantless seizure of their information off of fiber-optic cables. By enabling encryption across their networks, service providers can make backdoor surveillance more challenging, requiring the government to go to courts and use legal process. While Lavabit’s travails have shown how difficult that can be for service providers, at least there was the opportunity to fight back in court.
While not every company in our survey has implemented every recommendation, each step taken helps, and we appreciate those who have worked to strengthen their security. We hope that every online service provider adopts these best practices and continues to work to protect their networks and their users.
Crypto Survey Results
UPDATE, November 20, 2013: Facebook and Tumblr have provided further information to supplement the Encrypt the Web Report. We’re pleased to report that Tumblr is planning to upgrade its web connections to HTTPS this year and implement HSTS by 2014, and Facebook is working on encrypting data center links and implementing STARTTLS.
Great visual table array design that uses the company logos instead of text to make it easier for readers. The color-coding in each cell is also super-easy for readers to follow. It only takes seconds to skim through the design. The data is clearly communicated to the audience!
However, as an infographic released on the web, it’s missing a number of key features.
- No title. The infographic image will be shared on other sites, so the image file itself needs to have a title and a short introduction to what readers are seeing.
- No date. This information will obviously change over time, and they have already added the update you see in the text above. This infographic should clearly state that this information is current as of 11/20/13 so they can make future updates.
- No logo. Someone seeing this infographic posted anywhere else would have no idea that it comes from the EFF. The EFF brand has a lot of positive equity and the infographic would be more believable if readers know if comes from the EFF
- No copyright. The EFF would probably release this under Creative Commons, but that needs to be explicitly stated in the infographic itself.
- No original URL. The URL link to the original landing page on the EFF site should be included in the footer of the design so readers can find the original full-size version when they see smaller thumbnails posted on other sites.
Thanks to Mervik Haums for posting it on Google+!