Warning

 

Close
Confirm Action

Are you sure you wish to do this?

Cancel Confirm
AR15.COM
8/25/2008 11:05:16 AM EDT
This might not be new to everyone, but as a non technical net user this is something I was not aware of.  I use Gmail for lots of things, I scan important docs and email them to my account as a spare filing system, and since Google rules the net I figured my stuff was as safe as it could be. If this guy is correct i suppose there is cause for concern. I am hoping that someone who knows about this stuff can enlighten me (and others who are clueless) what is the real deal with Gmail security.

linky

thanks
8/25/2008 11:12:32 AM EDT
[#1]
That is the case with any website you visit and enter information on.

-d
8/25/2008 11:14:05 AM EDT
[#2]
SSL is not enabled by default, you must choose it. Just go to https://mail.google.com and you're set.

Doc
8/25/2008 12:26:55 PM EDT
[#3]
You have had the option to enable https by default in Gmail for a while now. They just recently added that to Google Apps (why it took so long I don't know).

When you use http:// to access a website the traffic is visible at any point in the network between you and the destination server. https:// add a layer of encryption so that anyone watching the packets cannot read the data.

This is especially important when using a wireless connection to access the network, it is trivial to sniff wireless traffic.

(note, there are still some other issues where SSL isn't 100% secure, but I won't confuse the issue right now )
8/25/2008 12:31:24 PM EDT
[#4]
I wish all sites used encryption by default regardless of what they have. BTW, if someone can watch your unencrypted net traffic they can do many things. Like post under your username on arfcom and a slew of different stuff. Trivial once you understand how this stuff works.

-Foxxz
8/25/2008 1:23:01 PM EDT
[#5]

Quoted:
I wish all sites used encryption by default regardless of what they have. BTW, if someone can watch your unencrypted net traffic they can do many things. Like post under your username on arfcom and a slew of different stuff. Trivial once you understand how this stuff works.

-Foxxz


I agree.

-Foxxz