Gmail – now with https enabled by default

Graham Cluley
Graham Cluley
@
@[email protected]
@gcluley

Gmail logo
This is good news.

Some 18 months after introducing a way of forcing your browser to use https when accessing the contents of your Gmail account, those nice folks at Google have decided to do the sensible thing and enable it for all users by default.

A post on the official Gmail blog announced the change in policy, which means that next time you log in to your email from an unencrypted airport hotspot, or check your correspondence while you’re having your morning Starbucks, that your email remains encrypted as it whizzes between your laptop and Google’s servers.

The timing of Google’s announcement is interesting though. Could it be sheer coincidence that Google has made this change to the way Gmail works at the very same time that it announced Chinese hackers were breaking into its systems, reportedly in order to access the Gmail accounts of human rights activists?

Sign up to our free newsletter.
Security news, advice, and tips.

At the moment we can only speculate, but regardless of the motivation – I’m pleased that Google has made this change as it makes life harder for the bad guys, who might try to snoop.

And anything which makes life harder for the bad guys, is good news for all the rest of us.

Google on enabling https in Gmail

Google is retaining the disable option for anyone who want to turn off https, but hopefully not many people will feel that’s necessary.


Graham Cluley is an award-winning keynote speaker who has given presentations around the world about cybersecurity, hackers, and online privacy. A veteran of the computer security industry since the early 1990s, he wrote the first ever version of Dr Solomon's Anti-Virus Toolkit for Windows, makes regular media appearances, and is the co-host of the popular "Smashing Security" podcast. Follow him on Twitter, Mastodon, Threads, Bluesky, or drop him an email.

What do you think? Leave a comment

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.