5 ms·
Unless you force it over to HTTPS or use an extension, it still uses plain ol' HTTP after authentication.
by bretthoerner 18y ago
Unless you force it over to HTTPS or use an extension, it still uses plain ol' HTTP after authentication.
- mwerty 18y agoI never understood why that was. I use https://mail.google.com https://mail.google.com to login and it sticks with https.
- rufo 18y agoThat's what he means by "forcing it" - if you specifically type https://mail.google.com/ https://mail.google.com/ Gmail will encrypt the entire session; if you just go to http://mail.google.com/ http://mail.google.com/ or (more commonly) www.gmail.com it uses SSL for authentication, then switches you back to unencrypted HTTP for the rest of your session.
- deleted 18y ago[deleted]