Researcher: Google Mail vulnerable to sidejacking despite SSL
Date : 02 01 2008 Category : Technology
Ars TechnicaSecurity researcher Robert Graham claimed Google Mail was largely immune to the session-ID-interception method of hacking known as sidejacking, but he's now backed away from that claim. Under some circumstances, Google Mail will still transmit unencrypted session ID information.