[106255] in North American Network Operators' Group
Re: https (was: Re: Exploit for DNS Cache Poisoning - RELEASED)
daemon@ATHENA.MIT.EDU (Jeffrey Ollie)
Thu Jul 24 19:57:28 2008
Date: Thu, 24 Jul 2008 18:56:24 -0500
From: "Jeffrey Ollie" <jeff@ocjtech.us>
To: nanog@merit.edu
In-Reply-To: <20080724040558.5b20e1c2@cs.columbia.edu>
Errors-To: nanog-bounces@nanog.org
On Thu, Jul 24, 2008 at 3:05 AM, Steven M. Bellovin <smb@cs.columbia.edu> wrote:
>
> The round trip issue affects latency, which in turn affects perceived
> responsiveness. This is quite definitely the reason why gmail doesn't
> always use https (though it, unlike some other web sites, doesn't
> refuse to use it).
Interestingly enough, Google just added a feature to GMail to force
secure connections:
http://googlesystem.blogspot.com/2008/07/force-gmail-to-use-secure-connection.html
Jeff