Re: Gmail/SSL

To: or-talk@xxxxxxxxxxxxx
Subject: Re: Gmail/SSL
From: defcon <defconoii@xxxxxxxxx>
Date: Sun, 9 Mar 2008 22:37:27 -0700
Delivered-to: archiver@xxxxxxxx
Delivered-to: or-talk-outgoing@xxxxxxxx
Delivered-to: or-talk@xxxxxxxx
Delivery-date: Mon, 10 Mar 2008 01:37:33 -0400
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; bh=mhKmRKkipztv8OPpH6h/pZLACRZK/0MIfmO2b87y1Do=; b=nsfaz5EiUcIMpNrRVrc4dXktypLVloDQQCKAtoVZCZsrlV9iwPnosoL1VLwQsKRxrzyR25qF8GAxT5s83274IJQOTbjoG21GA6rJmR5DShwr+CzUNh/AJfGqPmyGShK8kyoJg9QfUuT6RQhJCJxjXWbWOrxE9yXd4GZ60XJu+vk=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=RPeslW+6qZGhuU03jRMCz0MDziCA2nQsd8QhENJfjfZbnv9HkGHtCjPgCWGJTezAr30M2DijO78jvS9ba9r7HUnKoQOq3PvA3LAd2WVVIpXj2y0+vjtcEs5DTDGVQjnI1CXFOBJiPqe1YNYmLiACdQQfRjun1WBFSCXBv2C5Zrg=
In-reply-to: <a46699dc0803091805m2d8a1851l9edff27e994ba564@xxxxxxxxxxxxxx>
References: <1da45f2a0803091723i563a98a3tf4aecb00fcbf20cc@xxxxxxxxxxxxxx> <a46699dc0803091805m2d8a1851l9edff27e994ba564@xxxxxxxxxxxxxx>
Reply-to: or-talk@xxxxxxxxxxxxx
Sender: owner-or-talk@xxxxxxxxxxxxx

whatever you do, while in gmail dont exit gmail without logging off,
if you simply go to any non-ssl google site your cookie will be
exposed ፡(

Follow-Ups:
- Re: Gmail/SSL
  - From: anon ymous
- Re: Gmail/SSL
  - From: Mike Cardwell

References:
- Gmail/SSL
  - From: Jonathan Addington
- Re: Gmail/SSL
  - From: John Kimble