According to Langley, most of the websites that implement HTTPS (Hyper Text Transfer Protocol Secure) operates with a non-forward system secret. It raises the risk to be dismantled (decrypted) by ignorant hands. In this way, although that has been encrypted emails can be recorded at the time sent to your computer. In the last ten years, when the computer is faster, one can disassemble the private key of the server and decrypt the email traffic.
This can not be done on the forward secrecy. According to Langley, the forward secrecy, key cryptography (crypto private keys) for a connection is not stored in permanent storage. So that a person who intends evil can not decrypt the connection with just one key unload. Even the server operator also can not decrypt the HTTPS session.
Forward secret force HTTPS "live" for Gmail, Google Docs, SSL (Secure Sockets Layer) Search, and Google +. Forward application of secret HTTPS can be seen easily in Chrome browser. Chrome users can check this by clicking the green padlock in the address bar for HTTPS sites. There will be no word "ECDHE_RSA" as the key exchange mechanism.
While this is only Chrome and Firefox are supported by default to forward secret Google services because IE does not support the combination ECDHE and RC4. Langley hopes to support IE in the future.
