nanog mailing list archives

Re: security questions


From: Larry Brower <larry-lists () maxqe com>
Date: Sat, 13 Mar 2010 20:14:26 -0600

adrian kok wrote:
Hi

I have questions about security

I am using mozila to access gmail as https://mail.google.com/mail

Why mozilla prompts me the alert box?

"You have requested an encrypted page that contains some unencrypted information. Information that you see or enter on this 
page could easily be read by a third party."

1/ Can network software help to check? if yes. which software and how?

2/ How mozilla knows I have data not encrypted?
3/ ls https secured? If not. why it is PCI?

Thank you

Send instant messages to your online friends http://uk.messenger.yahoo.com


This message is saying that Google is including things using http:// in the site. This is common with Images. The login is still secure, just they just are not using SSL for some things.



 [ ~ ]  >> lynx --dump mail.google.com/mail|grep http\:\/\/
   http://gmail.com/app. [1]Learn more
   1. http://www.google.com/mobile/landing/mail.html#utm_source=gmailhpp
2. http://mail.google.com/support/bin/answer.py?answer=46346&fpUrl=https%3A%2F%2Fwww.google.com%2Faccounts%2FForgotPasswd%3FfpOnly%3D1%26continue%3Dhttp%253A%252F%252Fmail.google.com%252Fmail%252F%253Fui%253Dhtml%2526zy%253Dl%26service%3Dmail%26ltmpl%3Ddefault&fuUrl=https%3A%2F%2Fwww.google.com%2Faccounts%2FForgotPasswd%3FfuOnly%3D1%26continue%3Dhttp%253A%252F%252Fmail.google.com%252Fmail%252F%253Fui%253Dhtml%2526zy%253Dl%26service%3Dmail%26ltmpl%3Ddefault&hl=en
   3. http://mail.google.com/mail/signup
   4. http://mail.google.com/mail/help/intl/en/about.html
   5. http://mail.google.com/mail/help/intl/en/about_whatsnew.html
6. http://www.google.com/apps/intl/en/business/gmail.html#utm_medium=et&utm_source=gmail-signin-en&utm_campaign=crossnav 7. http://gmailblog.blogspot.com/?utm_source=en-gmftr&utm_medium=et&utm_content=gmftr
   8. http://mail.google.com/mail/help/intl/en/terms.html
   9. http://mail.google.com/support/


Current thread: