Gmail/SSL

scar scar at drigon.com
Sun Aug 10 06:44:08 UTC 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Jonathan Addington @ 2008/08/09 13:22:
> This is also on the Gmail blog, which notes that going to
> https://mail.google.com always had the same effect. (At least
> hopefully!)
> 

it did not have the same effect, unfortunately. ;)  perhaps they are
just trying to appease the masses with some hand-waving?

after logging in, the session would briefly jump to an insecure
connection for some reason or another, which could even be witnessed by
watching the URL in the address bar, and then jump back to a secure
connection.

the hope is now that this doesn't happen.

although i personally stopped using gmail long ago not because of this
but because of their privacy policies and retention of deleted e-mails,
even after a google account has been closed.
-----BEGIN PGP SIGNATURE-----

iD8DBQFIno44XhfCJNu98qARCOCfAKCj8hWHziYsmeHLOzFcF1f1nLaxIwCfbJ19
J4f+mzmsUd8GvCRJCPsuTvQ=
=NJAr
-----END PGP SIGNATURE-----



More information about the tor-talk mailing list