Re: newbie question

[security <security () xentek net>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

That probably isn't enough. Remember that GMail calls back with the  
XMLHTTPRequest object, and is probably not set up to do so in SSL.

Further up the thread, someone pointed to a Firefox extension that  
coaxes gmail to stay in SSL, that may be the answer to at least some  
encryption on the wire. Unless of course the state-run ISP is acting  
as a MITM.

- -em


On Sep 6, 2006, at 3:50 PM, Robert D. Holtz - Lists wrote:

> After you login to gmail go up to the http:// url and stick an 's'  
> onto it,
> e.g., https://, and it will switch to SSL!
>
> -----Original Message-----
> From: I.C. Weiner [mailto:i.c.weiner () gmail com]
> Sent: Tuesday, September 05, 2006 5:46 PM
> To: MandommGmail
> Cc: javier rojas; security-basics () securityfocus com
> Subject: Re: newbie question
>
> Perhaps I'm missing something, but GMail does NOT use SSL. Not for
> content, that is. Logon? Yes. But not for traffic afterwards...
>
> Don't have a solution for you; sorry. I just saw this and decided I
> needed to say something.
>
> Angus
>
> On 9/5/06, MandommGmail <mandomm () gmail com> wrote:
> > China?
> >
> > You can use SSL. Gmail has SSL. They are not able to snoop through  
> > SSL.
> >
> > Alex
> > ----- Original Message -----
> > From: "javier rojas" <javier.rojasr () gmail com>
> > To: <security-basics () securityfocus com>
> > Sent: Saturday, September 02, 2006 5:00 AM
> > Subject: newbie question
> >
> >
> > > hello folks,
> > >
> > > this is my first message to the list and i would like to start with
> > > some newbie questions...
> > >
> > > wel, i live in a contry that has not a good respect for privacy, i
> > > would like to know how can i keep my mail in gmail from been  
> > > snooped?
> > >
> > > can anyone just give me a link or a simple steps guide?
> > >
> > > i (and some friends) would really apreciate it.
> > >
> > > --
> > > Ciao, Javier
> > > linux counter #393724
> > > GPG Key Fingerprint = 46B76CFEDB0161089D9ECB22FEFDE7EBA8C2007E
> ---------------------------------------------------------------------- 
> -----
> > > This list is sponsored by: Norwich University
> > >
> > > EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> > > The NSA has designated Norwich University a center of Academic
> Excellence
> > > in Information Security. Our program offers unparalleled Infosec
> > > management education and the case study affords you unmatched  
> > > consulting
> > > experience. Using interactive e-Learning technology, you can earn  
> > > this
> > > esteemed degree, without disrupting your career or home life.
> > >
> > > http://www.msia.norwich.edu/secfocus
> ---------------------------------------------------------------------- 
> -----
> > >
> ---------------------------------------------------------------------- 
> -----
> > This list is sponsored by: Norwich University
> >
> > EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> > The NSA has designated Norwich University a center of Academic  
> > Excellence
> > in Information Security. Our program offers unparalleled Infosec
> management
> > education and the case study affords you unmatched consulting  
> > experience.
> > Using interactive e-Learning technology, you can earn this esteemed
> degree,
> > without disrupting your career or home life.
> >
> > http://www.msia.norwich.edu/secfocus
> ---------------------------------------------------------------------- 
> -----
> >
>
>
> --
>
>
> I miss freedom...
>
> ---------------------------------------------------------------------- 
> -----
> This list is sponsored by: Norwich University
>
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> The NSA has designated Norwich University a center of Academic  
> Excellence
> in Information Security. Our program offers unparalleled Infosec  
> management
> education and the case study affords you unmatched consulting  
> experience.
> Using interactive e-Learning technology, you can earn this esteemed  
> degree,
> without disrupting your career or home life.
>
> http://www.msia.norwich.edu/secfocus
> ---------------------------------------------------------------------- 
> -----
>
>
> ---------------------------------------------------------------------- 
> -----
> This list is sponsored by: Norwich University
>
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> The NSA has designated Norwich University a center of Academic  
> Excellence
> in Information Security. Our program offers unparalleled Infosec  
> management
> education and the case study affords you unmatched consulting  
> experience.
> Using interactive e-Learning technology, you can earn this esteemed  
> degree,
> without disrupting your career or home life.
>
> http://www.msia.norwich.edu/secfocus
> ---------------------------------------------------------------------- 
> -----

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)

iD8DBQFE/2Qfj8o5VXXdUSwRAhM2AJ0X3kuA9SaItm51yl6+YJlouThGIACgiudF
Dwt2qp/gN/1a+D+noFfZegA=
=tku4
-----END PGP SIGNATURE-----

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------