hello folks,
this is my first message to the list and i would like to start with
some newbie questions
wel, i live in a contry that has not a good respect for privacy, i
would like to know how can i keep my mail in gmail from been snooped?
can anyone just give me a link or a simple steps guide?
i (and some friends) would really apreciate it.

javier rojas <javier.rojasr (AT) gmail (DOT) comwrote:

this is my first message to the list and i would like to start with
some newbie questions
wel, i live in a contry that has not a good respect for privacy, i
would like to know how can i keep my mail in gmail from been snooped?
can anyone just give me a link or a simple steps guide?
i (and some friends) would really apreciate it.

Gmail provides SSL not only for secure authentication but also for
secure surfing of Gmail. you authenticate to the Gmail server,
and successfully log into your Inbox, the server switches your session
to normal HTTP. If you manually add an 's' to the "http" in the
address bar, Gmails will move your session from normal HTTP over to
SSL.

Firefox has an extension, "CustomizeGoogle", which has a tab for Gmail
where you can talk Firefox into automatically switching to HTTPS when
reading e-mails on Gmail.

Honestly, if you're set on using gmail, the safest way is to use PP3
to retrieve your mail and do all of the encrypting and decrypting
locally.

has an explanation on how to do it using Thunderbird.

9/1/06, javier rojas <javier.rojasr (AT) gmail (DOT) comwrote:
hello folks,

this is my first message to the list and i would like to start with
some newbie questions

wel, i live in a contry that has not a good respect for privacy, i
would like to know how can i keep my mail in gmail from been snooped?

can anyone just give me a link or a simple steps guide?

i (and some friends) would really apreciate it.

China?

You can use SSL. Gmail has SSL. They are not able to snoop through SSL.

Alex
Message
From: "javier rojas" <javier.rojasr (AT) gmail (DOT) com>
To: <security-basics (AT) securityfocus (DOT) com>
Sent: Saturday, September 02, 2006 5:00 AM
Subject: newbie question

hello folks,

this is my first message to the list and i would like to start with
some newbie questions

wel, i live in a contry that has not a good respect for privacy, i
would like to know how can i keep my mail in gmail from been snooped?

can anyone just give me a link or a simple steps guide?

i (and some friends) would really apreciate it.

Perhaps I'm missing something, but GMail does NT use SSL. Not for
content, that is. Logon? Yes. But not for traffic afterwards

Don't have a solution for you; sorry. I just saw this and decided I
needed to say something.

Angus

9/5/06, MandommGmail <mandomm (AT) gmail (DOT) comwrote:
China?

You can use SSL. Gmail has SSL. They are not able to snoop through SSL.

Alex
Message
From: "javier rojas" <javier.rojasr (AT) gmail (DOT) com>
To: <security-basics (AT) securityfocus (DOT) com>
Sent: Saturday, September 02, 2006 5:00 AM
Subject: newbie question
--
hello folks,

this is my first message to the list and i would like to start with
some newbie questions

wel, i live in a contry that has not a good respect for privacy, i
would like to know how can i keep my mail in gmail from been snooped?

can anyone just give me a link or a simple steps guide?

i (and some friends) would really apreciate it.

I.C. Weiner <i.c.weiner (AT) gmail (DOT) comwrote:
Perhaps I'm missing something, but GMail does NT use SSL. Not for
content, that is. Logon? Yes. But not for traffic afterwards

Don't have a solution for you; sorry. I just saw this and decided I
needed to say something.

The default behaviour of Gmail is to switch to normal HTTP after a
successful authentication. That does *not* mean Gmail does not *allow*
the use of SSL for traffic generated throughout the time the session
is active.

Like I mentioned in my previous reply to this thread, the
"customizegoogle" extension of Firefox has a feature which, if turned
on, automatically switches Gmail to SSL as soon as the authentication
phase ends.

In my opinion you should use steganographic software . This kind of
appliances allows you to hide files in another "normal" files called
carriers. The carriers are BMP, WAV, JPG, JPEG files and your data is hidden
inside them and encrypted with 256 bit AES encryption algoritm. The carrier
file acts normal when it is accesed by anybody ( the music file plays in
Winamp as usual , for example) and nothing reveals the fact that something
is hidden inside. you and your friends would know that the picture
Exotic_Flower_20.jpg is in fact a carrier file and contains encrypted word
documents and other stuff. In my opinion it is more important to avoid
making the authorities from your country suspicious related to you and your
activities and I am sure that persons who use encrypted mails are on their
blacklist with the indication of an increased surveillance ( of all types) .
I live in an Ex-communist and Ex-dictatorial country and I know what I'm
saying related to the fact that in some countries normal and decent people
are handled as potentially future terrorists and criminals .
I use Steganos Security Suite and their homepage is www.steganos.com. Good
luck and my respects to all members of the list. Regards

Message
From: "javier rojas" <javier.rojasr (AT) gmail (DOT) com>
To: <security-basics (AT) securityfocus (DOT) com>
Sent: Saturday, September 02, 2006 00:00
Subject: newbie question

hello folks,

this is my first message to the list and i would like to start with
some newbie questions

wel, i live in a contry that has not a good respect for privacy, i
would like to know how can i keep my mail in gmail from been snooped?

can anyone just give me a link or a simple steps guide?

i (and some friends) would really apreciate it.

But the use of SSL proxies can be detected, it triggers at the user's
interface a window warning him that the certificate isn't correct.
Am I right?
A question then comes to my mind: Are they able to sniff an https
session without the user being warned ?

2006/9/5, David Gillett <gillettdavid (AT) fhda (DOT) edu>:
I think GMail uses SSL (https://) by default; it certainly
supports it. If you can connect directly to Google, that's probably
good enough.

However, more and more enterprises -- and some countries! -- are
installing firewalls that are SSL proxies. If this includes you,
then SSL traffic is decrypted (and potentially read) and re-encrypted
at the proxy.
You can probably avoid that by using a VPN, but to do that, you need
access to a VPN server out beyond the perimeter

David Gillett
--
Message
From: javier rojas [mailto:javier.rojasr (AT) gmail (DOT) com]
Sent: Friday, September 01, 2006 2:00 PM
To: security-basics (AT) securityfocus (DOT) com
Subject: newbie question

hello folks,

this is my first message to the list and i would like to
start with some newbie questions

wel, i live in a contry that has not a good respect for
privacy, i would like to know how can i keep my mail in gmail
from been snooped?

can anyone just give me a link or a simple steps guide?

i (and some friends) would really apreciate it.