Security Basics mailing list archives

Re: Web mail intercepted! How?


From: McLain Causey <mclaincausey () yahoo com>
Date: Thu, 4 Aug 2005 10:39:00 -0500


On Aug 4, 2005, at 10:27 AM, Mark Owen wrote:
 For that
matter, anything sent out on the Internet unencrypted should already
be considered public.


That's really all there is to say about it. I think most services use SSL in the authentication phase only, if at all. With Yahoo!, it's optional (and not the default) even then. It's trivial to read webmail in such a situation.

You need GPG or some other encryption scheme if you want another layer of confidentiality.

Regards,
Mac


Current thread: