nanog mailing list archives
Re: Gmail and SSL
From: John Peach <john-nanog () johnpeach com>
Date: Fri, 14 Dec 2012 10:51:30 -0500
On Fri, 14 Dec 2012 09:47:03 -0600 Randy <nanog () afxr net> wrote:
I'm hoping to reach out to google's gmail engineers with this message, Today I noticed that for the past 3 days, email messages from my personal website's pop3 were not being received into my gmail inbox. Naturally, I figured that my pop3 service was down, but after some checking, every thing was working OK. I then checked gmail settings, and noticed some error. It explained that google is no longer accepting self signed ssl certificates. It claims that this change will "offer[s] a higher level of security to better protect your information". I don't believe that this change offers better security. In fact it is now unsecured - I am unable to use ssl with gmail, I have had to select the plain-text pop3 option. I don't have hundreds of dollars to get my ssl certificates signed, and to top it off, gmail never notified me of an error with fetching my mail. How many of email accounts trying to grab mail are failing now? I bet thousands, as a self signed certificate is a valid way of encrypting the traffic.
http://www.startssl.com/ Their certs are free and, from what I hear, are accepted by Google. -- John
Current thread:
- Gmail and SSL Randy (Dec 14)
- Re: Gmail and SSL John Peach (Dec 14)
- Re: Gmail and SSL Tim Franklin (Dec 14)
- Re: Gmail and SSL Christopher Morrow (Dec 14)
- Re: Gmail and SSL Eugen Leitl (Dec 14)
- Re: Gmail and SSL Christopher Morrow (Dec 14)
- Re: Gmail and SSL Tim Franklin (Dec 14)
- Re: Gmail and SSL John Peach (Dec 14)
- Re: Gmail and SSL Maxim Khitrov (Dec 14)
- RE: Gmail and SSL Matthew Black (Dec 14)
- Re: Gmail and SSL Peter Kristolaitis (Dec 14)
- Re: Gmail and SSL Christopher Morrow (Dec 14)
- Re: Gmail and SSL Jasper Wallace (Dec 20)