Archived Content

The following content is from an older version of this website, and may not display correctly.

Yahoo has fully encrypted traffic moving between its data centers following the NSA scandal, according to a blog post by its newly appointed chief information security officer Alex Stamos on Tumblr.

He said Yahoo will now be focussing its partners and "hundreds of global properties" to encourage further adoption of the security provisions.

"Our broader mission is to not only make Yahoo secure, but improve the security of the overall web ecosystem," Stamos said.


Agency documents revealed by former NSA contractor Edward Snowden suggested Yahoo may have been targeted by the NSA for surveillance.

In November last year Yahoo’s CEO Marissa Mayer announced plans to extend efforts to encrypt all data across its products.

This included the information moving between its data centers, giving its users an option to encrypt all data to and from Yahoo and work closely with international mail partners to ensure Yahoo co-branded mail accounts were https-enabled.

“As we have said before, we will continue to evaluate how we can protect our users’ privacy and their data. We appreciate, and certainly do not take for granted, the trust our users place in us,” Mayer said.

At the beginning of the year Yahoo made its Yahoo Mail more secure by making browsing over HTTPS the default.

In the blog post Stamos said the company has implemented the latest in security best-practices, including supporting TLS 1.2, Perfect Forward Secrecy and a 2048-bit RSA key for many of our global properties such as homepage, mail and digital magazines.

“Our goal is to encrypt our entire platform for all users at all time, by default,” Stamos said.

Stamos also revealed Yahoo is working on a new, encrypted, version of Yahoo Messenger which is expected to be deployed in coming months.