Re: Gmail and https

["Security Basic" <security.basic () gmail com>]

I'd advise people to use POP or IMAP over SSL
this will save them from a lot of pain and also makes it easier to
work offline :)


-- 
~SB
http://exploitsearch.com




On Feb 12, 2008 10:41 PM, Joe Klein <Josephk () mischoice com> wrote:
> In all fairness, here is another look at the same story, with a much deeper
> report on what exactly transpired.
>
> http://blog.wired.com/27bstroke6/2007/11/encrypted-e-mai.html
>
> At the bottom of the blog, there is a PDF of the entire email conversation
> between hushmail and the Wired reporter. Very good read.
>
> -joe
> -----Original Message-----
> From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
> Behalf Of Murda Mcloud
> Sent: Monday, February 11, 2008 10:29 PM
> To: security-basics () securityfocus com
>
> Subject: RE: Gmail and https
>
> Hushmail is as secure as a subpoena allows it to be?
>
> http://www.itnews.com.au/News/65213,hushmail-turns-out-to-be-anything-but.as
> px
>
> watch the wrap on the link.
> Cheers
>
> -----Original Message-----
> From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
> Behalf Of Ben de Bont
> Sent: Tuesday, February 12, 2008 7:21 AM
> To: 'Joe Klein'; 'Mohammad Tina'; security-basics () securityfocus com
> Subject: RE: Gmail and https
>
> Same with Yahoo and Hotmail.  This is due to operational cost. Plenty of
> other web options for more secure mail exist: hushmail etc
>
> - Ben
>
> -----Original Message-----
> From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
> Behalf Of Joe Klein
> Sent: Monday, February 11, 2008 9:30 AM
> To: 'Mohammad Tina'; security-basics () securityfocus com
> Subject: RE: Gmail and https
>
> You must go to https://gmail.google.com/ for an encrypted session.
>
> If you go to http://gmail.google.com/ and log in, then your session will be
> unencrypted.
>
> Most (if not all) of the links to gmail on Google's websites are to an
> unencrypted session.
>
> -joe
>
> -----Original Message-----
> From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
> Behalf Of Mohammad Tina
> Sent: Friday, February 08, 2008 1:50 PM
> To: security-basics () securityfocus com
> Subject: Gmail and https
>
> Hi,
> I notices recently that gmail after you logon the header in the
> address bar is http not https?
> is that normal?
>
>
>
> --
> /Mohammad N. Tina