Correct me if I misunderstand the following quoted paragraphs, but basically to compress something it must be decrypted first. This seems to be the claim of the article but I don't see this as true. For example if
a01 10b a01 is encryupted to
ccc c02 ccc then compression can still happen e.g.
substitute x for
Anyways assuming it is true, is there a legitimate security risk that Opera is intercepting traffic going through it when compression/turbo mode is enabled? If this takes place on the local computer with Opera installed I don't see this as a problem but if it takes place on a remote server then I would see the security threat. Does the compression take place locally? It must, how else would it be effective when it already needed to travel the internet?
Nokia caught secretly decrypting mobile browser traffic: ZDNet reports security researcher Gaurang Pandya's discovery that the “secure” HTTPS traffic from his web browser was being decrypted by Nokia's servers. (See the link.)
Nokia's reason is valid: Encrypted data appears as pseudo-random noise and cannot be compressed. But they did this secretly and there's no way to disable it. Opera's Mini browser does the same thing for the same reason, but makes it optional and explains it clearly. And while Nokia says they would never pry, the fact is that since they CAN, in the USA they could be compelled to do so.