Re: Gmail and https

[Wesley McGrew <wesley () mcgrewsecurity com>]

On Feb 8, 2008, at 1:49 PM, Mohammad Tina wrote:

> Hi,
> I notices recently that gmail after you logon the header in the
> address bar is http not https?
> is that normal?


Normal, in that it's how it has always behaved.

One trick that might not be as well known is that if you start your  
gmail session by typing or bookmarking https://mail.google.com and  
sign in, then it will remain SSL'd even after login.  That's how I  
recommend people use the web interface.

Wesley McGrew, MS, GCIH
wesley () mcgrewsecurity com
http://www.mcgrewsecurity.com