Google Blogoscoped

Forum

Gmail downgrade session encryption?

wonder [PersonRank 3]

Wednesday, February 4, 2009
15 years ago3,140 views

I read somewhere that gmail now uses RC4 – 128 bit. But they used to use AES – 256. Does anyone know if this is true and why the change?

wonder [PersonRank 3]

15 years ago #

I simply checked by clicking the icon in FF3. Gmail does use RC4-128 encryption not AES-256.

That really sucks...

wonder [PersonRank 3]

15 years ago #

No one cares? I thought this was newsworthy...

Ionut Alex. Chitu [PersonRank 10]

15 years ago #

This post has some potentially useful comments:
http://www.vdsat.com/2008/06/21/the-state-of-online-encryption/#comments

wonder [PersonRank 3]

15 years ago #

THANK YOU, Ionut!!!

Those comments revealed that gmail still offers AES-256 encryption which is much better than RC4-128. All you have to do is disable the RC4 ciphers in FireFox which I did. Now my gmail account has the AES-256 encryption.

Thanks again!!!

Forum home

Advertisement

 
Blog  |  Forum     more >> Archive | Feed | Google's blogs | About
Advertisement

 

This site unofficially covers Google™ and more with some rights reserved. Join our forum!