https (was: Re: Exploit for DNS Cache Poisoning - RELEASED)

Thu Jul 24 23:56:24 UTC 2008

On Thu, Jul 24, 2008 at 3:05 AM, Steven M. Bellovin <smb at cs.columbia.edu> wrote:
>
> The round trip issue affects latency, which in turn affects perceived
> responsiveness.  This is quite definitely the reason why gmail doesn't
> always use https (though it, unlike some other web sites, doesn't
> refuse to use it).

Interestingly enough, Google just added a feature to GMail to force
secure connections:

http://googlesystem.blogspot.com/2008/07/force-gmail-to-use-secure-connection.html

Jeff