https (was: Re: Exploit for DNS Cache Poisoning - RELEASED)

Jeffrey Ollie jeff at ocjtech.us
Thu Jul 24 18:56:24 CDT 2008


On Thu, Jul 24, 2008 at 3:05 AM, Steven M. Bellovin <smb at cs.columbia.edu> wrote:
>
> The round trip issue affects latency, which in turn affects perceived
> responsiveness.  This is quite definitely the reason why gmail doesn't
> always use https (though it, unlike some other web sites, doesn't
> refuse to use it).

Interestingly enough, Google just added a feature to GMail to force
secure connections:

http://googlesystem.blogspot.com/2008/07/force-gmail-to-use-secure-connection.html

Jeff




More information about the NANOG mailing list