Update your Gmail NOW to use SSL (https)!

[LazyLion]

http://it.slashdot.org/article.pl?sid=08/08/19/1433206

A Good Reason To Go Full-Time SSL For Gmail

"A tool that automatically steals IDs of non-encrypted sessions and breaks into Google Mail accounts has been presented at the Defcon hackers' conference in Las Vegas. Last week, Google introduced a new feature in Gmail that allows users to permanently switch on SSL and use it for every action involving Gmail, not just authentication. Users who did not turn it on now have a serious reason to do so, as Mike Perry, the reverse engineer from San Francisco who developed the tool, is planning to release it in two weeks."

To turn on the Security Encryption in your Gmail...

1) Open up your Gmail and sign in
2) Click on the Settings Link at the top right
3) On the First Tab (General) scroll down near the bottom - "Browser Connection"
4) Click the Radio Button "Always use https"
5) Click the button below to "Save Changes"
6) log out and log-in again
7) Check the Address bar to see that Gmail is now using https as the start of its address.

There you go!

How to repair the Gmail app to work with Secure Connection.

If you use the Gmail app for Mobile... (like me - I use the Symbian Version)...

http://www.google.com/mobile/default/mail/index.html

Then you might have noticed that enabling SSH on all Gmail connections causes the app to stop working. Here's how you fix it...

1) Start the app on your Mobile
2) When it asks for permission to connect "Allow application Gmail to use network and send or receive data?" - click "No"
3) The app will open but will give you an error message "Gmail for mobile can't access the server until you grant it permission to" - click "OK"
4) Click the Menu Button
5) Choose "Go to" menu
6) Scroll down to "Settings" Menu Item and select
7) Scroll down to the third box "Always use secure network connections (slower performance) and check the box.
8) Click the save button
9) Now check your mail!

 

[cryptic1]

Thank you very much

 

[Mephisto_Helix]

Ta Gman ........

 

[mercurial]

Thanks G. Yeah those Defcon guys got pwned

http://mybroadband.co.za/vb/showthread.php?t=131502 It's a little further down the page.

 

[Fiekus]

done, thanks!

 

[chiskop]

Not available for GMail Apps.

 

[The_Unbeliever]

Done that.

@ chiskop - maybe they'll implement it a bit later on?

 

[The_Unbeliever]

Thanks G. Yeah those Defcon guys got pwned

http://mybroadband.co.za/vb/showthread.php?t=131502 It's a little further down the page.

That's now just

 

[chiskop]

Done that.

@ chiskop - maybe they'll implement it a bit later on?

Um, okay. Just logged out to see if I could change the options at login. Login is https, and now without explicitly changing anything, its all https.



When you said a bit later on, I thought you meant days/weeks.

 

[Peder]

it was https without me ever changing settings wonder why :~

Oh and According to here: http://mail.google.com/support/bin/answer.py?hl=en&ctx=mail&answer=74765

If you sign in to Gmail via a non-secure Internet connection, like a public wireless or non-encrypted network, your Google account may be more vulnerable to hijacking.

 

[LazyLion]

it was https without me ever changing settings wonder why :~[/url]

Maybe the link you use to open it already has the "https" in the link?

 

[d0b33]

Problem with setting to HTTPS is that gmail notify apps wont work.

 

[mh348]

Not available for GMail Apps.

You can use "Better Gmail 2" for that, its a FireFox addon,

 

[Boodles]

Thanks dude

 

[Boodles]

I notice now that each time i refresh, the URL says 'secure connection' - and also at the end of the URL bar, it says 'mail.google.com' and is coloured yellow.

Never used to do this.

 

[Threepwood]

Nice.

I wondered if you could make gmail totally ssl, was just too lazy to look

Will this make your email client always connect via ssl too? If it's set up correctly etc.

 

[krycor]

uhm, i've always only used ssl.. if you have a firefox plugin, you use to be able to force it. Oh wellm no more 3rd party software needed

 

[LazyLion]

How to repair the Gmail app to work with Secure Connection.

If you use the Gmail app for Mobile... (like me - I use the Symbian Version)...

http://www.google.com/mobile/default/mail/index.html

Then you might have noticed that enabling SSH on all Gmail connections causes the app to stop working. Here's how you fix it...

1) Start the app on your Mobile
2) When it asks for permission to connect "Allow application Gmail to use network and send or receive data?" - click "No"
3) The app will open but will give you an error message "Gmail for mobile can't access the server until you grant it permission to" - click "OK"
4) Click the Menu Button
5) Choose "Go to" menu
6) Scroll down to "Settings" Menu Item and select
7) Scroll down to the third box "Always use secure network connections (slower performance) and check the box.
8) Click the save button
9) Now check your mail!

 

[LazyLion]

Hope everybody is secure by now!

 

[eaglebeaver]

Hope everybody is secure by now!

Thank you for the thread.
Do I need to do anything extra if using nokia email push email? Haven't tried but a bit nervous.