

News Archive
March 2012
February 2012
January 2012
December 2011
November 2011
October 2011
September 2011
August 2011
July 2011
June 2011
May 2011
April 2011
March 2011
February 2011
January 2011
December 2010
November 2010
October 2010
September 2010
August 2010
July 2010
June 2010
May 2010
April 2010
March 2010
February 2010
January 2010
December 2009
November 2009
October 2009
September 2009
August 2009
July 2009
June 2009
May 2009
April 2009
March 2009
February 2009
December 2008
November 2008
October 2008
September 2008
August 2008
July 2008
June 2008
May 2008
April 2008
March 2008
February 2008
January 2008
December 2007
November 2007
October 2007
September 2007
August 2007
July 2007
June 2007
May 2007
April 2007
March 2007
February 2007
Gmail Switches to Default Https Encryption Following Attack
January 13, 2010, 7:08 amAs news of Google's China situation dominates headlines, the company has also announced that it is turning on https access for Gmail as the default (Gmail accounts were hacked in China, in case you haven't read about that yet).
Https, which stands for Hypertext Transfer Protocol Secure is used to provide encryption and secure ID. Back in 2008 Google started giving users the option to use it.
"We initially left the choice of using it up to you because there's a downside: https can make your mail slower since encrypted data doesn't travel across the web as quickly as unencrypted data," says Gmail Engineering Director Sam Schillace. "Over the last few months, we've been researching the security/latency tradeoff and decided that turning https on for everyone was the right thing to do."
Interesting timing on that decision.
The company is currently rolling out https for all Gmail users, and if you have set your own https preference in Gmail's settings, nothing will change. Users do still have the option to turn it off. It will just be on by default.

"Gmail will still always encrypt the login page to protect your password," says Schillace. "Google Apps users whose admins have not already defaulted their entire domains to https will have the same option."
Google notes that offline Gmail users using http may experience some hiccups. If this includes you, you may want to read up on this.
Related Articles:
> Google Adds Way to Easily Merge Duplicate Contacts in Gmail
> Google Adds Google Docs Previews to Gmail




