SSL-encrypted Gmail not safe to ’sidejacking’ attacks, says researcher
Robert Graham, CEO of Errata Security, who last year found that it’s possible to capture someone’s session cookie via wireless eavesdropping, now says that even encrypted services such as Google’s Gmail can sometimes provide him with a session cookie. This is a departure from his advice last August when he said SSL HTTPS sessions of […]