Security Basics mailing list archives

Re: newbie question


From: "Ayaz Ahmed Khan" <ayaz () pakcon org>
Date: Thu, 7 Sep 2006 14:33:06 +0500

I.C. Weiner <i.c.weiner () gmail com> wrote:
Perhaps I'm missing something, but GMail does NOT use SSL. Not for
content, that is. Logon? Yes. But not for traffic afterwards...

Don't have a solution for you; sorry. I just saw this and decided I
needed to say something.

The default behaviour of Gmail is to switch to normal HTTP after a
successful authentication. That does *not* mean Gmail does not *allow*
the use of SSL for traffic generated throughout the time the session
is active.

Like I mentioned in my previous reply to this thread, the
"customizegoogle" extension of Firefox has a feature which, if turned
on, automatically switches Gmail to SSL as soon as the authentication
phase ends.

--
Ayaz Ahmed Khan

"I'm returning this note to you, instead of your paper, because it
(your paper) presently occupies the bottom of my bird cage."
               -- English Professor, Providence College

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence in Information Security. Our program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Using interactive e-Learning technology, you can earn this esteemed degree, without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


Current thread: