Gmail has a problem that can enable others to view or get in your e-mail on Gmail. It is being advertised widely on the Internet now, so more instances will probably occur. The login process is secure, but unless you set a setting to make your session secure your sending and receiving messages is not. A person can grab the session cookie/identifier and view your e-mail.

You have two choices to fix this if you use Gmail. First is to always sign on Gmail using https not http (which is default) or change a setting in Gmail requiring you use https always.

When you logon using https://gamil.com or https://www.gmail.com you will receive a security error saying the security certificate was issued for another site. They are apparently using the same certificate whether you come in with those addresses or https://mail.google.com which does not give the error. You can choose to ignore the security issue and continue.

To change the settings in Gmail to require using https do the following: Go in Gmail and then go to Settings (at the top right) and look for Browser Connection near the bottom of the page and click the radio button by Always Use https. You will now need to always use https to get in your Gmail account.

Dwight

TO SUBSCRIBE

This is a little article I am doing across the Internet of my personal opinions. This reflects my personal thoughts. I try to write several times a month on a variety of subjects. It may be religious at times, political at times, and at other times just my reactions on something happening out there. It will often be like an op-ed article. If I do what I intend, you will at times want to shout I agree, other times you will want to say Dwight has really lost it now, but most importantly I want to challenge you to think. Feel free to forward this to others. If you don't want to get this e-mail let me know. Feel free to use what you read from me, but I request you give me credit and send a tear sheet if published in a newspaper or magazine. Thanks.

If you would like to receive it and you are not on my mailing list, you can subscribe at www.yahoogroups.com or send me an e-mail requesting a subscription. You can find past issues on my home page at http://www.dwightwatt.com/articles/articles.html