On Tue, Jan 14, 2014 at 4:08 AM, Stephan Aßmus <superstippi@xxxxxx> wrote: > On 14.01.2014 09:43, pulkomandy@xxxxxxxxxxxxx wrote: >> -const char* kDefaultSearchPageURL = "http://www.google.com";; >> +const char* kDefaultSearchPageURL = "http://www.google.com/search?q=%s";; > > > Should this now be https? I suppose that makes sense, although Google redirects all http to https anyway, so ultimately it won't matter. They do send HSTS headers from their servers as well. I'm not sure if we obey those however in Web+, or if we happen to have/use a preloaded HSTS site list. http://www.chromium.org/sts