RE: Gmail and https

["Ben de Bont" <ben () argentsecurity com>]

Same with Yahoo and Hotmail.  This is due to operational cost. Plenty of
other web options for more secure mail exist: hushmail etc

- Ben

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of Joe Klein
Sent: Monday, February 11, 2008 9:30 AM
To: 'Mohammad Tina'; security-basics () securityfocus com
Subject: RE: Gmail and https

You must go to https://gmail.google.com/ for an encrypted session.

If you go to http://gmail.google.com/ and log in, then your session will be
unencrypted. 

Most (if not all) of the links to gmail on Google's websites are to an
unencrypted session.

-joe

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of Mohammad Tina
Sent: Friday, February 08, 2008 1:50 PM
To: security-basics () securityfocus com
Subject: Gmail and https

Hi,
I notices recently that gmail after you logon the header in the
address bar is http not https?
is that normal?



-- 
/Mohammad N. Tina