On 3/10/08, defcon <defconoii@xxxxxxxxx> wrote: > whatever you do, while in gmail dont exit gmail without logging off, > if you simply go to any non-ssl google site your cookie will be > exposed ፡( No, cookies for SSL and non-SSL -sites are different in firefox. Check with any forum. While you are logged in when using https:// you are a guest when using http:// .