RE: Gmail and https

["Joe Klein" <Josephk () mischoice com>]

In all fairness, here is another look at the same story, with a much deeper
report on what exactly transpired.

http://blog.wired.com/27bstroke6/2007/11/encrypted-e-mai.html

At the bottom of the blog, there is a PDF of the entire email conversation
between hushmail and the Wired reporter. Very good read.

-joe
-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of Murda Mcloud
Sent: Monday, February 11, 2008 10:29 PM
To: security-basics () securityfocus com
Subject: RE: Gmail and https

Hushmail is as secure as a subpoena allows it to be?

http://www.itnews.com.au/News/65213,hushmail-turns-out-to-be-anything-but.as
px

watch the wrap on the link.
Cheers

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of Ben de Bont
Sent: Tuesday, February 12, 2008 7:21 AM
To: 'Joe Klein'; 'Mohammad Tina'; security-basics () securityfocus com
Subject: RE: Gmail and https

Same with Yahoo and Hotmail.  This is due to operational cost. Plenty of
other web options for more secure mail exist: hushmail etc

- Ben

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of Joe Klein
Sent: Monday, February 11, 2008 9:30 AM
To: 'Mohammad Tina'; security-basics () securityfocus com
Subject: RE: Gmail and https

You must go to https://gmail.google.com/ for an encrypted session.

If you go to http://gmail.google.com/ and log in, then your session will be
unencrypted. 

Most (if not all) of the links to gmail on Google's websites are to an
unencrypted session.

-joe

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of Mohammad Tina
Sent: Friday, February 08, 2008 1:50 PM
To: security-basics () securityfocus com
Subject: Gmail and https

Hi,
I notices recently that gmail after you logon the header in the
address bar is http not https?
is that normal?



-- 
/Mohammad N. Tina