Live data from Hacker News

Default HTTPS access for Gmail

gmailblog.blogspot.com

21–30 of 31 posts

Re: Default HTTPS access for Gmail

#21
post #20

It's kind of amazing that it wasn't like this from the start. Unsecured coffe shop wifi + http = everyone in the room can grab your password.

No. GMail's login page is always HTTPS so no one in the coffee shop can grab your password.

However, all the mail is in the clear. So if some crappy website sends your password via email, then someone can can grab it.

Re: Default HTTPS access for Gmail

#25
post #20

It's kind of amazing that it wasn't like this from the start. Unsecured coffe shop wifi + http = everyone in the room can grab your password.

No. GMail's login page is always HTTPS so no one in the coffee shop can grab your password. However, all the mail is in the clear. So if some crappy website sends your password via email, then someone can can grab it.

Which can is just as bad.

Re: Default HTTPS access for Gmail

#26
post #20

It's kind of amazing that it wasn't like this from the start. Unsecured coffe shop wifi + http = everyone in the room can grab your password.

No. GMail's login page is always HTTPS so no one in the coffee shop can grab your password. However, all the mail is in the clear. So if some crappy website sends your password via email, then someone can can grab it.

I'd donate towards an SSL certificate for news.yc

Re: Default HTTPS access for Gmail

#27
post #24

Good that it's still possible to turn it off. In Iran 2-3days before and after each political event government restricts access to only :80. No IMAP no POP3, and no :443.

The login form always uses HTTPS.

And there's also remember me feature.

Re: Default HTTPS access for Gmail

#28

Good that it's still possible to turn it off. In Iran 2-3days before and after each political event government restricts access to only :80. No IMAP no POP3, and no :443.

how would you log in to turn it off?

Already turned it off.
Post reply on HN