3

I am looking for a web-UI email service where the entire session is SSL (encrypted). Gmail and Yahoo Mail are both web applications but SSL is only used for the login page, the rest of the session (including emails) are in the clear. I am willing to pay for such a service. It would of course have to have all the latest email features (search, folders, contacts, etc) and be reliable.

Wavy Crab
  • 1,735
  • 5
  • 22
  • 34
  • Also see http://superuser.com/questions/25658/gmail-and-ssl-encryption-how-much-is-encrypted for more on encryption with webmail services. – jtimberman Aug 28 '09 at 01:02

2 Answers2

13

You can force Gmail to use SSL the entire time. Scroll down to "Browser connection" on the first page of Settings, and check the "Always use HTTPS" option. And Done :D

Edit 4/29/2014: This is now enabled by the default but can be turned off. Also, Google Apps admins can allow or disallow the option to turn it off in Google's cpanel.

alpha1
  • 1,686
  • 1
  • 14
  • 18
7

GMail does SSL. Go to https://gmail.com instead of http://gmail.com

MDMarra
  • 20,442
  • 4
  • 44
  • 54
  • Correct. The Gmail setting "Browser connection: Always use https/Don't always use https" just enforces HTTPS, in case you forget to type `https://` yourself. So, to use HTTPS one does not need that setting per se. – Arjan Oct 29 '09 at 09:51