Mt. Vernon Register-News

Community News Network

October 15, 2013

Yahoo to make SSL encryption the default for Web mail

WASHINGTON — Yahoo will encrypt Web-based email by default for all of its users beginning Jan. 8, the company has told The Washington Post.

"Yahoo takes the security of our users very seriously," the company said in an emailed statement Monday. Yahoo began offering users the option to use the SSL encryption standard this year. The option "encrypts your mail as it moves between your browser and Yahoo's servers," the company said.

SSL is the standard for Internet encryption and helps protect communications from third-party snooping. The encryption is widely believed to make it harder for the National Security Agency to spy on online activities.

Yahoo has lagged behind its major competitors in offering encryption for its Web mail service. Google offered SSL as an option for its Web-based Gmail in July 2008 and made it the default for users in early 2010. It became an option for Microsoft's free Web mail service, Hotmail, in November 2010, and became the default during the switch to Outlook.com in July 2012. Social networking site Facebook started offering SSL as an option in November 2011, and made it the default for U.S. users in February, and for the world in July.

Amie Stepanovich, director of the Domestic Surveillance Program at the Electronic Privacy Information Center, commended Yahoo for the move. "It's always a positive thing when companies take steps to protect their customers' information," she said, but noted that "unfortunately, this often only happens after a harmful event."

The moves to encryption for free Web mail services constitute a major privacy gain for users, but there are other circumstances where data associated with email could be less secure. For instance, the email apps on some mobile devices may not support the SSL encryption standard, exposing users on those devices to possible snooping by third parties.

While Yahoo is finally implementing SSL by default, Google and Facebook are already moving on to higher levels of security, such as longer key lengths and "perfect forward secrecy," both of which make the encryption stronger.

Christopher Soghoian, the Principal Technologist and a Senior Policy Analyst with the American Civil Liberties Union's Speech, Privacy and Technology Project, said he's glad Yahoo has finally implemented encryption. But he expresses disappointment it took them so long.

"It is unfortunate that it has taken Yahoo four years to do what Google was able to do in 2010: deploy HTTPS encryption, for all users, by default," he argued. "Yahoo's glacial progress on this issue has been a gift to intelligence agencies around the world, who have been able to perform massive, dragnet-surveillance of Yahoo users' unprotected emails."

The American Civil Liberties Union, Electronic Frontier Foundation, Reporters Without Borders and other organizations have been asking Yahoo to implement SSL encryption for Web mail. Nonprofit advocates were not the only ones who urged Yahoo to make the shift: Sen. Chuck Schumer, D-N.Y., sent a letter to several companies that did not use SSL, including Yahoo, asking them to change their practices in light of privacy concerns.

He sent the letter in February 2011 — nearly three years before Yahoo expects to make the switch.

1
Text Only
Community News Network
  • A 'wearable robot' helps her walk again

    Science is about facts, numbers, laws and formulas. To be really good at it, you need to spend a lot of time in school. But science is also about something more: dreaming big and helping people.

    April 23, 2014

  • Cuba is running out of condoms

    The newest item on Cuba's list of dwindling commodities is condoms, which are now reportedly in short supply. In response, the Cuban government has approved the sale of expired condoms.

    April 23, 2014

  • Screen Shot 2014-04-22 at 4.42.47 PM.png VIDEO: Leopard attacks crowd in India

    A leopard caused panic in the city of Chandrapur when it sprung from the roof of a house and charged at rescue workers.

    April 22, 2014 1 Photo

  • In cuffs... 'Warlock' in West Virginia accused of sexual assault

    Police in West Virginia say a man claiming to be a “warlock” used promises of magical spells to lure children into committing sexual acts with him.

    April 22, 2014 1 Photo

  • McCain 1 House Republicans are more active on Twitter than Democrats

    Your representative in the House is almost certainly on Twitter. Your senator definitely is. But how are they using the social network? Are Democrats more active than Republicans, or vice versa? Who has the most followers on the Hill?

    April 22, 2014 1 Photo

  • Do White Castle prices tell us anything about the minimum wage?

    The paper looked at how many delicious steamed sliders the minimum wage has been able to purchase over time. The point is that as it notes, in 1981, the $3.35 minimum could buy a whole dozen. Today, at $7.25, it could purchase just 10.

    April 21, 2014

  • VIDEO: Moose charges snowmobile, flees after warning shot

    While snowmobiling in New England, Bob and Janis Powell of Maine were charged by a moose and caught the entire attack on camera.

    April 21, 2014

  • Why do wolves howl?

    Of all the myths that dog the wolf, none is more widely accepted than the idea that wolves howl at the moon. Images of wolves with their heads upturned, singing at the night sky, are as unquestioned as a goldfish's three-second memory or a dog's color-blindness (both also myths).

    April 18, 2014

  • quake.jpg Pennsylvania won’t take action following Ohio ruling on quakes, fracking

    Pennsylvania officials plan no action despite new Ohio rules on drilling that affect a seismically active area near the state line.

    April 18, 2014 1 Photo

  • The case for separate beds

    The other night I slept on a twin bed in the guest room of the house I share with my husband and our two kids.
    It was the best night's sleep I've had in years.

    April 17, 2014

Twitter Updates
Facebook
Stocks