The flaw that is addressed in http://www.grc.com/sn/sn-272.htm which is Security Now! with Steve Gibson, Episode 272, recorded October 27, 2010: Firesheep puts a lot of pressure on you to deploy full SSL.
For example by Full SSL, I don't just mean to log-in with. I mean,
#1 The site must allow users to browse & post while using SSL.
#2 For sending and receiving e-mail (it could be by web based e-mail or SMTP/POP OR even an IMAP client on their computer) using SSL.
#3 The site must allow users to browse, pay online while using SSL.
If Verizon supports SSL for Non-FIOS DSL users like myself, it's a very well-kept secret - I've seen other current postings about how Verizon is one of the only big players who doesn't let you log in to your webmail on a secure https: page. My google and yahoo email accounts let me do that. I tried logging onto a link that said it was a secure Verizon webmail page at
https://www.verizon.net/ssowebapp/VOLPortalLogin
and I get stuck on an "upsell promo" page that won't load. How are customers supposed to access secure webmail on Verizon?
You must be a registered user to add a comment here. If you've already registered, please log in. If you haven't registered yet, please register and log in.