Secure Web Mail and Public Wireless

Target Audience

If you use public wireless (in libraries, hotels, cafes, etc.) and web accounts like Gmail and Hotmail, this is for you.

This is not relevant for the college's Outlook Web Access which is more secure.

Two Things to Know

• Hackers can monitor your wireless connection. They can capture data flowing between your notebook and the wireless access point (think antenna).
• Some web mail services put an unencrypted cookie on your computer as you log in.

The Problem

If a hacker monitors your wireless signal, he/she can grab the cookie and access your Gmail or other account.

This does not allow them to see or change your password, but it does allow them to read and use your email account.

A Solution for Gmail

While accessing public wireless, use a new method to reach the Gmail secure login.

Do not use http://gmail.google.com

Do use https://gmail.google.com (notice the 's' after http).

This will encrypt your login and prevent hackers from grabbing an insecure login cookie.

To save future effort, you can create a shortcut, bookmark, or favorite with this URL embedded. Then there is no need to type it each time you check your Gmail account.

Other Web Mail

If you use a different web mail service such as Hotmail or Yahoo! Mail, please contact their support service for secure login tips.

back

Maintained by Brien G. Muller, IT Help Desk
Skidmore College, Saratoga Springs, NY
Revised 08/21/2007