Windows IT Pro is the leading independent community for IT professionals deploying Microsoft Windows server and client applications and technologies.
  
  
  Advanced Search 


June 17, 2009

Gmail to go with HTTPS by default

RSS
Subscribe to Windows IT Pro | See More Security Articles Here | Reprints | Or get the Monthly Online Pass—only $5.95 a month!
back to blog index

Webmail is inherently insecure for several different reasons - one of which being that without SSL your correspondence is easily sniffed and possibly even stored in your browser's cache.

Using POP3 isn't much better in terms of privacy, which is why using POP3S to download your mail adds a bit of security that could keep the more likely snoops from reading your mail as it travels to and from your mail server.

Google is undoubtedly one of the largest Web mail providers today, and in case you didn't know it already you could access Gmail via SSL. However that's not the default mode of connectivity - which could present all sorts of serious trouble if people are accessing Gmail from open networks and public wifi hotspots where it's all to easy to listen in a vast array of digital conversation not meant for the public at large.

A group of researchers recently sent a letter to Google asking that the company make SSL connectivity the default mode of operation for Gmail. Google has now responded stating basically that they're testing and looking into the feasibility of the researcher's request.

One problem is server load from computational overhead. But since Google has a gigantic purse and a huge number of servers I doubt that supporting SSL by default for all Gmail users would present much a problem. At the same time, if they do make SSL the default connectivity method then other Web mail providers would need to follow suit in order to keep pace - which would be good for everyone that uses Web mail.

End of Article



Reader Comments
For those who need to know. You can go into your gmail settings and scroll down to 'Browser connection' and select 'Always use HTTPS'. Log off, log back in and you will see that the 's' is now added to http. You are now secure.

Greg Greene
IT support

GreyFox June 17, 2009 (Article Rating: )


Why was this never an issue with Hotmail...? It's been around a lot longer than Gmail, yet no one seems to care that Hotmail doesn't even have an option to browse with SSL full time...

chriswong June 17, 2009 (Article Rating: )


You must be a registered user or online subscriber to comment on this article. Please log on before posting a comment. Are you a new visitor? Register now





Search Security Matters
 
Security Matters
NOVEMBER 2009
1 2 3 4 5 6 7
8 9 10 11 12 13 14
15 16 17 18 19 20 21
22 23 24 25 26 27 28
29 30      
or

 Recently in Security Matters
Wordpress 2.8.4 Fixes A Big Security Hole
Make a Comment
Microsoft Releases 5 Critical Patches
Make a Comment
How To Help Secure HTTP Data Without SSL

Last Comment
The article has very less information. Need some elaboration....
(1 Comments)
Sometimes The Cookie Doesn't Crumble
Make a Comment
SecureTweets for Twitter
Make a Comment

More blogs about technology,
software, and Windows.

Windows IT Pro Home Register FAQ for Windows WinInfo News
Europe Edition About Us Contact Us/Customer Service Media Kit Affiliates / Licensing  
SQL Server Magazine Office & SharePoint Pro DevProConnections IT Job Hound
Left-Brain.com Technology Resource Directory asp.netPRO ITTV Windows SuperSite 
 
 Windows IT Pro is a Division of Penton Media Inc.
 © 2009 Penton Media, Inc. Terms of Use | Privacy Statement