Update your Gmail NOW to use SSL (https)!

LazyLion

King of de Jungle
Joined
Mar 17, 2005
Messages
104,835
http://it.slashdot.org/article.pl?sid=08/08/19/1433206

A Good Reason To Go Full-Time SSL For Gmail

"A tool that automatically steals IDs of non-encrypted sessions and breaks into Google Mail accounts has been presented at the Defcon hackers' conference in Las Vegas. Last week, Google introduced a new feature in Gmail that allows users to permanently switch on SSL and use it for every action involving Gmail, not just authentication. Users who did not turn it on now have a serious reason to do so, as Mike Perry, the reverse engineer from San Francisco who developed the tool, is planning to release it in two weeks."

To turn on the Security Encryption in your Gmail...

1) Open up your Gmail and sign in
2) Click on the Settings Link at the top right
3) On the First Tab (General) scroll down near the bottom - "Browser Connection"
4) Click the Radio Button "Always use https"
5) Click the button below to "Save Changes"
6) log out and log-in again
7) Check the Address bar to see that Gmail is now using https as the start of its address.

There you go! ;)

How to repair the Gmail app to work with Secure Connection.

If you use the Gmail app for Mobile... (like me - I use the Symbian Version)...

http://www.google.com/mobile/default/mail/index.html

Then you might have noticed that enabling SSH on all Gmail connections causes the app to stop working. Here's how you fix it...

1) Start the app on your Mobile
2) When it asks for permission to connect "Allow application Gmail to use network and send or receive data?" - click "No"
3) The app will open but will give you an error message "Gmail for mobile can't access the server until you grant it permission to" - click "OK"
4) Click the Menu Button
5) Choose "Go to" menu
6) Scroll down to "Settings" Menu Item and select
7) Scroll down to the third box "Always use secure network connections (slower performance) and check the box.
8) Click the save button
9) Now check your mail!
 
Last edited:

chiskop

Executive Member
Joined
Mar 17, 2006
Messages
9,221
Done that.

@ chiskop - maybe they'll implement it a bit later on?

Um, okay. Just logged out to see if I could change the options at login. Login is https, and now without explicitly changing anything, its all https.

:D

When you said a bit later on, I thought you meant days/weeks. :)
 

d0b33

Honorary Master
Joined
Jul 16, 2004
Messages
17,431
Problem with setting to HTTPS is that gmail notify apps wont work.
 

Boodles

Executive Member
Joined
Dec 28, 2005
Messages
5,294
I notice now that each time i refresh, the URL says 'secure connection' - and also at the end of the URL bar, it says 'mail.google.com' and is coloured yellow.

Never used to do this.
 

Threepwood

Senior Member
Joined
Aug 27, 2007
Messages
806
Nice.

I wondered if you could make gmail totally ssl, was just too lazy to look :D

Will this make your email client always connect via ssl too? If it's set up correctly etc.
 

krycor

Honorary Master
Joined
Aug 4, 2005
Messages
18,546
uhm, i've always only used ssl.. if you have a firefox plugin, you use to be able to force it. Oh wellm no more 3rd party software needed :)
 

LazyLion

King of de Jungle
Joined
Mar 17, 2005
Messages
104,835
How to repair the Gmail app to work with Secure Connection.

If you use the Gmail app for Mobile... (like me - I use the Symbian Version)...

http://www.google.com/mobile/default/mail/index.html

Then you might have noticed that enabling SSH on all Gmail connections causes the app to stop working. Here's how you fix it...

1) Start the app on your Mobile
2) When it asks for permission to connect "Allow application Gmail to use network and send or receive data?" - click "No"
3) The app will open but will give you an error message "Gmail for mobile can't access the server until you grant it permission to" - click "OK"
4) Click the Menu Button
5) Choose "Go to" menu
6) Scroll down to "Settings" Menu Item and select
7) Scroll down to the third box "Always use secure network connections (slower performance) and check the box.
8) Click the save button
9) Now check your mail!
 
Top