« July 28, 2007 | July 30, 2007 | August 02, 2007 »

July 30, 2007

Secure gmail

Voila: https://mail.google.com/

But save that URL, gmail users.

The digital certificate presented by other https-ified synonyms for gmail.com, including the "obvious" secure web URL https://gmail.com present certificates whose names don't match the corresponding hostnames. I guess Google can't afford the $50 or so necessary to enable that. Default browser logic will give you a warning dialog from the depths of the X.509 runtime ["It is possible, although unlikely, that someone may be trying to intercept your communication with this web site." It's safe to ignore that dialog, together with its overly-unctuous, "Attention—everyone please remain calm" attitude, but who needs another stupid dialog popping up all the time? Not I, and not you.]

0xDE points out that ISPs are starting to do "deep inspection" of packets, including reading email traffic. Yucchh—I'm bookmarking

https://mail.google.com/, and so should you.

Posted by tplambeck at 10:00 PM

« July 28, 2007 | July 30, 2007 | August 02, 2007 »