WaffleBox

I believe this was discussed on the latest TWiT, well it was one of Leo Laporte’s shows. GMail, as with all Google services, such as Google Reader, does not encrypt your session while using the service.

What this means
This means that when you are reading your email via http://mail.google.com your data can potentially be viewed by someone else. While they do not have the ability to change account settings, such as passwords, there is the possibility that they could read your emails.

A dead simple fix
Instead of going to http://mail.google.com to read your emails, go to https://mail.google.com.

Notice the extra s in https://? This will run an encrypted connection between your PC and Google’s server, instead of passing the data back and forth in plain text.

Security | rss | leave a comment | trackback