Yahoo encrypts all products, asserts it never gave access to data

[Lee J <lee () riskbasedsecurity com>]

http://www.scmagazine.com/yahoo-encrypts-all-products-asserts-it-never-gave-access-to-data/article/321728/

Yahoo asserted it has never turned over data to government agencies,
including the National Security Agency (NSA). To further its commitment to
user privacy, the internet corporation announced Monday it would be
offering encryption across all its products.

The company announced in October that Yahoo Mail would receive default
HTTPS encryption with a 2048-bit key in January 2014. Now all information
that moves between Yahoo data centers will receive the same treatment by
the end of the first quarter of 2014. Users will also have the option to
encrypt data flow to and from Yahoo.

"There is nothing more important to us than protecting our users' privacy,"
Marissa Mayer, Yahoo CEO, said in a post on Monday.

_______________________________________________
Dataloss Mailing List (dataloss () datalossdb org)
Archived at http://seclists.org/dataloss/
Unsubscribe at http://lists.osvdb.org/mailman/listinfo/dataloss
For inquiries regarding use or licensing of data, e-mail
        sales () riskbasedsecurity com 

Supporters:

# OWASP http://www.appsecusa.org
# Builders, Breakers and Defenders
# Time Square, NYC 20-21 Nov
o()xxxx[{::::::::::::::::::::::::::::::::::::::::>

Risk Based Security (http://www.riskbasedsecurity.com/)
Risk Based Security offers security intelligence, risk management services and customized security solutions. The 
YourCISO portal gives decision makers access to tools for evaluating their security posture and prioritizing risk 
mitigation strategies. Cyber Risk Analytics offers actionable threat information and breach analysis.