[106255] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: https (was: Re: Exploit for DNS Cache Poisoning - RELEASED)

daemon@ATHENA.MIT.EDU (Jeffrey Ollie)
Thu Jul 24 19:57:28 2008

Date: Thu, 24 Jul 2008 18:56:24 -0500
From: "Jeffrey Ollie" <jeff@ocjtech.us>
To: nanog@merit.edu
In-Reply-To: <20080724040558.5b20e1c2@cs.columbia.edu>
Errors-To: nanog-bounces@nanog.org

On Thu, Jul 24, 2008 at 3:05 AM, Steven M. Bellovin <smb@cs.columbia.edu> wrote:
>
> The round trip issue affects latency, which in turn affects perceived
> responsiveness.  This is quite definitely the reason why gmail doesn't
> always use https (though it, unlike some other web sites, doesn't
> refuse to use it).

Interestingly enough, Google just added a feature to GMail to force
secure connections:

http://googlesystem.blogspot.com/2008/07/force-gmail-to-use-secure-connection.html

Jeff


home help back first fref pref prev next nref lref last post