Google has closed one of the big security risks associated with using its free hosted Gmail mail service. You can now select an option in your account preferences to make every session require an encrypted Web connection. Although this may make your Gmail slower as each time your mail connects to server and back it has encrypt and decrypt.
https for login
Gmail requires a secure connection for your login details, regardless of whether or not you start with the secure Gmail site address. However, when you start using the service, Google was taking you back to an unencrypted Web connection. The same was true when someone click on link form a different site. That was a big security risk as the messages would pass in the clear and unencrypted. This was making you vulnerable as someone could intercept your Google session token and have full access to your Gmail account. Although if you still type https in URL your connection was secure but user had to enter this ever time.
Google in its Gmail blog has released a new feature "a Browser Connection option at the bottom of its Settings > General view" that lets you select "Always use https," which is the protocol name for a URL that makes your browser start up a SSL/TLS encrypted connection with a Web server.
Another related feature: "Last account activity"A related feature is "Last account activity" which provides you details of your las logins (access mode - browser or pop or mobile, ip address and time). So next time you are suspicious that someone is hacking your account check this. To see this option go to bottom of your mail page and click on Last account activity: .... Details
No comments:
Post a Comment