Re: Necessity of GPG when using SSL

2006-02-27 Thread Jonathan Boles
On 23/02/2006, at 7:26 AM, Dany wrote: Hello, I switched few years ago to fastmail.fm for several reasons : - https + advanced protections when accessing from public terminal (including url pseudo-scrambling) - IMAP with SSL - Text and only text for the webmail interface (no pop-up ad and no

Re: Necessity of GPG when using SSL

2006-02-27 Thread Janusz A. Urbanowicz
On Fri, Feb 24, 2006 at 06:06:17AM -0500, Henry Hertz Hobbit wrote: > Benjamin Esham <[EMAIL PROTECTED]> wrote: > > >On Feb 22, 2006, at 6:22 AM, Janusz A. Urbanowicz wrote: > > > >> And there is really no point in ecryptiong the whole access since the > >> contents, the emails usually travel the

Re: Necessity of GPG when using SSL

2006-02-24 Thread Pawel Shajdo
On Feb 24, 2006 at 06:06 -0500, Henry Hertz Hobbit wrote: > Last then first. Generally, it is very difficult to intercept email > en-transit. That was not always the case. There was a time when you > had hubs and you could listen in to everything on a LAN. Those days are > gone with switches (m

Re: Necessity of GPG when using SSL

2006-02-24 Thread Henry Hertz Hobbit
Benjamin Esham <[EMAIL PROTECTED]> wrote: >On Feb 22, 2006, at 6:22 AM, Janusz A. Urbanowicz wrote: > >> And there is really no point in ecryptiong the whole access since the >> contents, the emails usually travel the rest of the net unencrypted. > >But wouldn't it be much easier for an attacker t

Re: Necessity of GPG when using SSL

2006-02-23 Thread Janusz A. Urbanowicz
On Wed, Feb 22, 2006 at 10:38:19AM -0500, Benjamin Esham wrote: > On Feb 22, 2006, at 6:22 AM, Janusz A. Urbanowicz wrote: > > >And there is really no point in ecryptiong the whole access since the > >contents, the emails usually travel the rest of the net unencrypted. > But wouldn't it be much

Re: Necessity of GPG when using SSL

2006-02-22 Thread Dany
Hello, I switched few years ago to fastmail.fm for several reasons : - https + advanced protections when accessing from public terminal (including url pseudo-scrambling) - IMAP with SSL - Text and only text for the webmail interface (no pop-up ad and no graphics), just plain speed - WebDAV (I don

Re: Necessity of GPG when using SSL

2006-02-22 Thread Benjamin Esham
On Feb 22, 2006, at 6:22 AM, Janusz A. Urbanowicz wrote: And there is really no point in ecryptiong the whole access since the contents, the emails usually travel the rest of the net unencrypted. But wouldn't it be much easier for an attacker to intercept all of your e-mail by listening in on

Re: Necessity of GPG when using SSL

2006-02-22 Thread Janusz A. Urbanowicz
On Tue, Feb 21, 2006 at 07:52:26AM -0500, Henry Hertz Hobbit wrote: > Johan Wevers wrote: > > >Henry Hertz Hobbit wrote: > > > >>Usually, if you are using a web interface to access your email, only the > >>initial authentication is done via SSL. After that if your URL address > >>shifts to using

Re: Necessity of GPG when using SSL

2006-02-21 Thread Henry Hertz Hobbit
Johan Wevers wrote: >Henry Hertz Hobbit wrote: > >>Usually, if you are using a web interface to access your email, only the >>initial authentication is done via SSL. After that if your URL address >>shifts to using an "http://"; rather than the "https://"; you made your >>initial connection with

Re: Necessity of GPG when using SSL

2006-02-20 Thread Chris Boldiston
If you use Firefox, download the CustomizeGoogle extension and you can select "Secure" https mode for all gmail traffic and "Remove ads and related pages" Chris On 2/20/06, lusfert <[EMAIL PROTECTED]> wrote: > Benjamin Esham wrote on 20.02.2006 7:50: > > John Clizbe wrote: > >> Earthlink and Goog

Re: Necessity of GPG when using SSL

2006-02-19 Thread lusfert
Benjamin Esham wrote on 20.02.2006 7:50: > John Clizbe wrote: >> Earthlink and Google's GMail use https on their signin page then then >> switch >> over to http once authenticated > > I saw a neat trick somewhere online... if you use > "https://mail.google.com"; as your > login page for Gmail, the

Re: Necessity of GPG when using SSL

2006-02-19 Thread Benjamin Esham
John Clizbe wrote: Henry Hertz Hobbit wrote: Usually, if you are using a web interface to access your email, only the initial authentication is done via SSL. After that if your URL address shifts to using an "http://"; rather than the "https://"; you made your initial connection with mea

Re: Necessity of GPG when using SSL

2006-02-19 Thread John Clizbe
Johan Wevers wrote: > Henry Hertz Hobbit wrote: > >>Usually, if you are using a web interface to access your email, only the >>initial authentication is done via SSL. After that if your URL address >>shifts to using an "http://"; rather than the "https://"; you made your >>initial connection with

Re: Necessity of GPG when using SSL

2006-02-19 Thread Johan Wevers
Henry Hertz Hobbit wrote: >Usually, if you are using a web interface to access your email, only the >initial authentication is done via SSL. After that if your URL address >shifts to using an "http://"; rather than the "https://"; you made your >initial connection with means that your communicati

Re: Necessity of GPG when using SSL

2006-02-15 Thread Janusz A. Urbanowicz
On Tue, Feb 14, 2006 at 10:34:38PM +0100, Jim Berland wrote: > Hi everybody, > > I understand the use of GPG end-to-end-encryption and use it with a > few of my contacts. What I want to make sure is the following. > > I am going to move to China for some time. My email ISP is located > outsid

RE: Necessity of GPG when using SSL

2006-02-15 Thread Henry Hertz Hobbit
Jim Berland <[EMAIL PROTECTED]> wrote: >Hi everybody, > >I understand the use of GPG end-to-end-encryption and use it with a >few of my contacts. What I want to make sure is the following. > >I am going to move to China for some time. My email ISP is located >outside China and I connect to i