Bluefield Daily Telegraph, Bluefield, WV

Community News Network

October 15, 2013

Yahoo to make SSL encryption the default for Web mail

WASHINGTON — Yahoo will encrypt Web-based email by default for all of its users beginning Jan. 8, the company has told The Washington Post.

"Yahoo takes the security of our users very seriously," the company said in an emailed statement Monday. Yahoo began offering users the option to use the SSL encryption standard this year. The option "encrypts your mail as it moves between your browser and Yahoo's servers," the company said.

SSL is the standard for Internet encryption and helps protect communications from third-party snooping. The encryption is widely believed to make it harder for the National Security Agency to spy on online activities.

Yahoo has lagged behind its major competitors in offering encryption for its Web mail service. Google offered SSL as an option for its Web-based Gmail in July 2008 and made it the default for users in early 2010. It became an option for Microsoft's free Web mail service, Hotmail, in November 2010, and became the default during the switch to Outlook.com in July 2012. Social networking site Facebook started offering SSL as an option in November 2011, and made it the default for U.S. users in February, and for the world in July.

Amie Stepanovich, director of the Domestic Surveillance Program at the Electronic Privacy Information Center, commended Yahoo for the move. "It's always a positive thing when companies take steps to protect their customers' information," she said, but noted that "unfortunately, this often only happens after a harmful event."

The moves to encryption for free Web mail services constitute a major privacy gain for users, but there are other circumstances where data associated with email could be less secure. For instance, the email apps on some mobile devices may not support the SSL encryption standard, exposing users on those devices to possible snooping by third parties.

While Yahoo is finally implementing SSL by default, Google and Facebook are already moving on to higher levels of security, such as longer key lengths and "perfect forward secrecy," both of which make the encryption stronger.

Christopher Soghoian, the Principal Technologist and a Senior Policy Analyst with the American Civil Liberties Union's Speech, Privacy and Technology Project, said he's glad Yahoo has finally implemented encryption. But he expresses disappointment it took them so long.

"It is unfortunate that it has taken Yahoo four years to do what Google was able to do in 2010: deploy HTTPS encryption, for all users, by default," he argued. "Yahoo's glacial progress on this issue has been a gift to intelligence agencies around the world, who have been able to perform massive, dragnet-surveillance of Yahoo users' unprotected emails."

The American Civil Liberties Union, Electronic Frontier Foundation, Reporters Without Borders and other organizations have been asking Yahoo to implement SSL encryption for Web mail. Nonprofit advocates were not the only ones who urged Yahoo to make the shift: Sen. Chuck Schumer, D-N.Y., sent a letter to several companies that did not use SSL, including Yahoo, asking them to change their practices in light of privacy concerns.

He sent the letter in February 2011 — nearly three years before Yahoo expects to make the switch.

1
Text Only
Community News Network
  • Bill Clinton coming to eastern Kentucky to stump for Grimes

    By RONNIE ELLIS
    CNHI News Service

    GLASGOW — Democrat Alison Lundergan Grimes is again calling in the “Big Dog” in her quest to unseat five-term Republican U.S. Sen. Mitch McConnell.

    July 27, 2014

  • How spy agencies keep their 'toys' from law enforcement

    A little over a decade ago, federal prosecutors used keystroke logging software to steal the encryption password of an alleged New Jersey mobster, Nicodemo Scarfo Jr., so they could get evidence from his computer to be used at his trial.

    July 25, 2014

  • 072214 Diamond Llama 1.jpg Llama on the loose corralled in Missouri town

    A llama on the lam cruised Main Street Tuesday before it mistook a resident’s fenced backyard for a place to grab a meal and freshen up.

    July 22, 2014 2 Photos

  • VIDEO: New story emerges about Texas children locked in hot car

    After footage showed Texas shoppers breaking the windows of a hot car to rescue children trapped inside, additional witnesses have come forward to correct the story behind what has become a viral video.

    July 16, 2014

  • Screen Shot 2014-07-16 at 2.12.33 PM.png Gunshots narrowly miss TV reporter

    A reporter for a West Virginia television station narrowly escaped injury or worse Monday while covering a fatal weekend shooting in Beckley.

    July 16, 2014 1 Photo

  • State lawmakers tweak gun regulations

    Obtaining a concealed carry weapons license within the Commonwealth of Kentucky is not a simple task.

    July 16, 2014

  • When your doctor commits suicide, things get complicated

    When they call for appointments, patients are told they can't see their doctor. Ever. The standard line: "We are sorry, but your doctor died suddenly."

    July 15, 2014

  • VIDEO: Texas shoppers smash window to rescue children in hot car

    Shoppers in Texas took matter into their own hands, smashing a Jeep's windows with a hammer when they say they saw two young children inside the hot car. The children's mother reportedly said she left them while she went to get a haircut.

    July 15, 2014

  • NWS-HB0713-HowardMartin-004.jpg Airman laid to rest back home in Indiana six decades after death

    The mystery of what happened to a military transport plane that disappeared in the fall of 1952 into an Alaskan glacier was solved two years ago when a helicopter crew spotted the wreckage. But it took another two years to retrieve the remains of Airman Howard Miller and 16 other servicemen passengers. Saturday, Miller was laid to rest in his hometown of Elwood, Ind., with full military honors. Hundreds turned out for the funeral and burial services.

    July 13, 2014 2 Photos

  • New state laws go into effect July 15

    Victims of domestic violence in Kentucky will soon be allowed fast access to concealed carry gun permits while voters from precincts surrounding state parks in dry counties will be able to vote to allow alcohol sales.

    July 11, 2014