RE: Gmail and https

["Joe Klein" <Josephk () mischoice com>]

You must go to https://gmail.google.com/ for an encrypted session.

If you go to http://gmail.google.com/ and log in, then your session will be
unencrypted. 

Most (if not all) of the links to gmail on Google's websites are to an
unencrypted session.

-joe

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of Mohammad Tina
Sent: Friday, February 08, 2008 1:50 PM
To: security-basics () securityfocus com
Subject: Gmail and https

Hi,
I notices recently that gmail after you logon the header in the
address bar is http not https?
is that normal?



-- 
/Mohammad N. Tina