Security Basics mailing list archives

Re: Web mail intercepted! How?


From: Andrew Haninger <ahaning () gmail com>
Date: Fri, 5 Aug 2005 13:13:05 -0400

On 8/4/05, McLain Causey <mclaincausey () yahoo com> wrote:
That's really all there is to say about it.  I think most services
use SSL in the authentication phase only, if at all.
FWIW, Gmail always uses SSL for authentication. However, if you visit
it with http://gmail.google.com/, it will use HTTP after you
authenticate. If you use https://gmail.google.com/, it will use HTTPS
after you authenticate.

Kinda cool, but I wish I could make it always forward me to HTTPS.

-Andy


Current thread: