The Norman Transcript

Community News Network

October 15, 2013

Yahoo to make SSL encryption the default for Web mail

WASHINGTON — Yahoo will encrypt Web-based email by default for all of its users beginning Jan. 8, the company has told The Washington Post.

"Yahoo takes the security of our users very seriously," the company said in an emailed statement Monday. Yahoo began offering users the option to use the SSL encryption standard this year. The option "encrypts your mail as it moves between your browser and Yahoo's servers," the company said.

SSL is the standard for Internet encryption and helps protect communications from third-party snooping. The encryption is widely believed to make it harder for the National Security Agency to spy on online activities.

Yahoo has lagged behind its major competitors in offering encryption for its Web mail service. Google offered SSL as an option for its Web-based Gmail in July 2008 and made it the default for users in early 2010. It became an option for Microsoft's free Web mail service, Hotmail, in November 2010, and became the default during the switch to Outlook.com in July 2012. Social networking site Facebook started offering SSL as an option in November 2011, and made it the default for U.S. users in February, and for the world in July.

Amie Stepanovich, director of the Domestic Surveillance Program at the Electronic Privacy Information Center, commended Yahoo for the move. "It's always a positive thing when companies take steps to protect their customers' information," she said, but noted that "unfortunately, this often only happens after a harmful event."

The moves to encryption for free Web mail services constitute a major privacy gain for users, but there are other circumstances where data associated with email could be less secure. For instance, the email apps on some mobile devices may not support the SSL encryption standard, exposing users on those devices to possible snooping by third parties.

While Yahoo is finally implementing SSL by default, Google and Facebook are already moving on to higher levels of security, such as longer key lengths and "perfect forward secrecy," both of which make the encryption stronger.

Christopher Soghoian, the Principal Technologist and a Senior Policy Analyst with the American Civil Liberties Union's Speech, Privacy and Technology Project, said he's glad Yahoo has finally implemented encryption. But he expresses disappointment it took them so long.

"It is unfortunate that it has taken Yahoo four years to do what Google was able to do in 2010: deploy HTTPS encryption, for all users, by default," he argued. "Yahoo's glacial progress on this issue has been a gift to intelligence agencies around the world, who have been able to perform massive, dragnet-surveillance of Yahoo users' unprotected emails."

The American Civil Liberties Union, Electronic Frontier Foundation, Reporters Without Borders and other organizations have been asking Yahoo to implement SSL encryption for Web mail. Nonprofit advocates were not the only ones who urged Yahoo to make the shift: Sen. Chuck Schumer, D-N.Y., sent a letter to several companies that did not use SSL, including Yahoo, asking them to change their practices in light of privacy concerns.

He sent the letter in February 2011 — nearly three years before Yahoo expects to make the switch.

1
Text Only | Photo Reprints
Community News Network
  • Screen Shot 2014-04-22 at 4.42.47 PM.png VIDEO: Leopard attacks crowd in India

    A leopard caused panic in the city of Chandrapur when it sprung from the roof of a house and charged at rescue workers.

    April 22, 2014 1 Photo

  • The top 12 government programs ever

    Which federal programs and policies succeed in being cost-effective and targeting those who need them most? These two tests are obvious: After all, why would we spend taxpayers' money on a program that isn't worth what it costs or helps those who do not need help?

    April 22, 2014

  • In cuffs... 'Warlock' in West Virginia accused of sexual assault

    Police in West Virginia say a man claiming to be a “warlock” used promises of magical spells to lure children into committing sexual acts with him.

    April 22, 2014 1 Photo

  • Cats outsmart the researchers

    I knew a lot had been written about dogs, and I assumed there must be at least a handful of studies on cats. But after weeks of scouring the scientific world for someone - anyone - who studied how cats think, all I was left with was this statement, laughed over the phone to me by one of the world's top animal cognition experts, a Hungarian scientist named Ádám Miklósi.

    April 22, 2014

  • McCain 1 House Republicans are more active on Twitter than Democrats

    Your representative in the House is almost certainly on Twitter. Your senator definitely is. But how are they using the social network? Are Democrats more active than Republicans, or vice versa? Who has the most followers on the Hill?

    April 22, 2014 1 Photo

  • Do your genes make you procrastinate?

    Procrastinators, in my experience, like nothing better than explaining away their procrastination: General busyness, fear of failure, and simple laziness are just a handful of the excuses and theories often tossed around. Now researchers from the University of Colorado Boulder have added another option to the list: genetics.

    April 21, 2014

  • Do White Castle prices tell us anything about the minimum wage?

    The paper looked at how many delicious steamed sliders the minimum wage has been able to purchase over time. The point is that as it notes, in 1981, the $3.35 minimum could buy a whole dozen. Today, at $7.25, it could purchase just 10.

    April 21, 2014

  • VIDEO: Moose charges snowmobile, flees after warning shot

    While snowmobiling in New England, Bob and Janis Powell of Maine were charged by a moose and caught the entire attack on camera.

    April 21, 2014

  • Can Hillary Clinton rock the cradle and the world?

    What's most interesting to contemplate is the effect becoming a grandmother will have on Hillary's ambition. It's one of life's unfairnesses that a woman's peak career years often coincide with her peak childbearing years.

    April 21, 2014

  • Smartphone kill switches are coming

    Smartphones need kill switches. It's a relatively easy solution to the pricey (and irritating) problem of smartphone theft. But who would have thought that the big carriers would team up with Apple, Google, Microsoft, Nokia, Samsung and lots of other manufacturers to voluntarily begin adding the technology by July 2015? The cooperative spirit! It makes so much sense!

    April 18, 2014