The Washington Times-Herald

Community News Network

October 15, 2013

Yahoo to make SSL encryption the default for Web mail

WASHINGTON — Yahoo will encrypt Web-based email by default for all of its users beginning Jan. 8, the company has told The Washington Post.

"Yahoo takes the security of our users very seriously," the company said in an emailed statement Monday. Yahoo began offering users the option to use the SSL encryption standard this year. The option "encrypts your mail as it moves between your browser and Yahoo's servers," the company said.

SSL is the standard for Internet encryption and helps protect communications from third-party snooping. The encryption is widely believed to make it harder for the National Security Agency to spy on online activities.

Yahoo has lagged behind its major competitors in offering encryption for its Web mail service. Google offered SSL as an option for its Web-based Gmail in July 2008 and made it the default for users in early 2010. It became an option for Microsoft's free Web mail service, Hotmail, in November 2010, and became the default during the switch to Outlook.com in July 2012. Social networking site Facebook started offering SSL as an option in November 2011, and made it the default for U.S. users in February, and for the world in July.

Amie Stepanovich, director of the Domestic Surveillance Program at the Electronic Privacy Information Center, commended Yahoo for the move. "It's always a positive thing when companies take steps to protect their customers' information," she said, but noted that "unfortunately, this often only happens after a harmful event."

The moves to encryption for free Web mail services constitute a major privacy gain for users, but there are other circumstances where data associated with email could be less secure. For instance, the email apps on some mobile devices may not support the SSL encryption standard, exposing users on those devices to possible snooping by third parties.

While Yahoo is finally implementing SSL by default, Google and Facebook are already moving on to higher levels of security, such as longer key lengths and "perfect forward secrecy," both of which make the encryption stronger.

Christopher Soghoian, the Principal Technologist and a Senior Policy Analyst with the American Civil Liberties Union's Speech, Privacy and Technology Project, said he's glad Yahoo has finally implemented encryption. But he expresses disappointment it took them so long.

"It is unfortunate that it has taken Yahoo four years to do what Google was able to do in 2010: deploy HTTPS encryption, for all users, by default," he argued. "Yahoo's glacial progress on this issue has been a gift to intelligence agencies around the world, who have been able to perform massive, dragnet-surveillance of Yahoo users' unprotected emails."

The American Civil Liberties Union, Electronic Frontier Foundation, Reporters Without Borders and other organizations have been asking Yahoo to implement SSL encryption for Web mail. Nonprofit advocates were not the only ones who urged Yahoo to make the shift: Sen. Chuck Schumer, D-N.Y., sent a letter to several companies that did not use SSL, including Yahoo, asking them to change their practices in light of privacy concerns.

He sent the letter in February 2011 — nearly three years before Yahoo expects to make the switch.

1
Text Only
Community News Network
  • cleaning supplies Don't judge mothers with messy homes

    I was building shelves in my garage when a neighbor girl, one of my 4-year-old daughter's friends, approached me and said, "I just saw in your house. It's pretty dirty. Norah's mommy needs to clean more."

    July 25, 2014 1 Photo

  • taylor.armerding.jpg Inequality crisis shot with factual problems, hypocrisy

    President Obama, various media and political liberals say inequality, of all things, is the defining issue of our times. Yet this message is delivered by multimillionaires and a president who jets from tee time to stump speech on the taxpayer's dime.
     

    July 25, 2014 1 Photo

  • How spy agencies keep their 'toys' from law enforcement

    A little over a decade ago, federal prosecutors used keystroke logging software to steal the encryption password of an alleged New Jersey mobster, Nicodemo Scarfo Jr., so they could get evidence from his computer to be used at his trial.

    July 25, 2014

  • Russia's war on McDonald's takes aim at the Filet-o-Fish

    Russia said earlier this week that it had no intention of answering Western sanctions by making it harder for Western companies to conduct business in Russia.
    But all bets are off, apparently, when you threaten the Russian waistline.

    July 25, 2014

  • Has the iPad lost its swag?

    July 24, 2014

  • Facebook continues moneymaking trend

    Facebook seems to have figured out - for now at least - the holy grail for all media right now: how to make money selling mobile ads.

    July 24, 2014

  • Lindley, Tom.jpg Better police needed for college teams enticed to cheat

    The NCAA once cracked down on colleges that went too far luring top prospects, then it targeted teams that lathered players with special treatment. That was until the NCAA's get-tough approach backfired, rendering it ineffective and creating an opportunity for those who want to play dirty.

    July 24, 2014 1 Photo

  • Police Brutality screen shot. Technology plays key part in battling police brutality (VIDEO)

    Allegations of police brutality are nothing new -- as long as there has been law enforcement, citizens have registered claims that some officers cross the line. But in the last few years, the claims of excessive force are being corroborated with new technology from cell phone cameras, police dash-cams and surveillance videos. 

    July 24, 2014 1 Photo

  • Arizona's prolonged lethal injection is fourth in U.S. this year

    Arizona's execution of double-murderer Joseph Wood marked the fourth time this year that a state failed to dispatch a convict efficiently, according to the Constitution Project, a bipartisan legal group.3

    July 24, 2014

  • Almost half of America's obese youth don't know they're obese

    The good news is that after decades of furious growth, obesity rates finally seem to be leveling off in the U.S.. The bad news is that America's youth still appear to be dangerously unaware of the problem.

    July 23, 2014