Privacy advocates welcome Yahoo Mail HTTPS roll-out

Yahoo starts providing users with the option to encrypt their webmail sessions

Digital rights and privacy advocates have welcomed Yahoo's decision to provide its users with an option to enable HTTPS (HTTP Secure) for their entire webmail sessions.

"We're really happy that Yahoo! is starting 2013 right by letting Yahoo! Mail users use HTTPS to access their e-mail accounts securely," the Electronic Frontier Foundation (EFF) said Monday in a blog post.

In November, the EFF, together with other privacy, security and human rights advocates and organizations, sent a letter to Yahoo CEO Marissa Mayer asking that the company implement full-session HTTPS for its communication services, including email and instant messaging.

HTTPS, a combination of the HTTP and SSL/TLS protocols, encrypts the traffic between Web clients and servers and prevents potential attackers from intercepting and inspecting potentially sensitive communications.

The lack of full-session HTTPS can be exploited by attackers to hijack accounts and intercept traffic on open wireless networks and also enables some governments that control the Internet infrastructure in their countries to spy on the private communications of political activists, members of the press and other individuals.

"Over the last several years, Yahoo! has repeatedly been urged by security experts to adopt HTTPS, but has taken no visible steps to do so," the privacy advocates wrote in their November letter to Marissa Mayer. "Unfortunately, this delay puts your users at risk, which is particularly disturbing since Yahoo! Mail is widely used in many of the world's most politically repressive states. There have been frequent reports of political activists and government critics being shown copies of their email messages as evidence during interrogation sessions, underscoring the importance of providing basic measures to protect the privacy of e-mail."

"Some of us have already been compelled to recommend that users avoid Yahoo! Mail because of its continued lack of essential security protections," they wrote at the time.

On Dec. 11, Yahoo started rolling out a new Yahoo Mail user interface for Web and Windows 8 and released new versions of its Yahoo Mail mobile applications for iPhone and Android.

The new Yahoo webmail interface has a "Turn on SSL" setting in the Mail Options menu. However, the setting is off by default and needs to be manually turned on by users who wish to take advantage of it. "If you're a Yahoo! Mail user, please take this step right away to protect your privacy when reading and writing e-mail," the EFF said Monday.

"Access is encouraged to see that Yahoo! is now supporting HTTPS globally for its mail and messaging services, an important and overdue step for the security and privacy of its users,", a digital freedom advocacy group that also signed the November letter, said Friday in a blog post. "Pending technical analysis of its implementation, we believe this decision by Yahoo! responds to some of the concerns raised by civil society and security experts, and signals a continuing strengthening of their services' privacy protections."

Yahoo's competitors have supported full-session HTTPS for some time. Google implemented full-session HTTPS as an optional setting in Gmail back in 2008 and at the beginning of 2010 it turned it on by default for all Gmail users. Microsoft added the option in Hotmail in November 2010 and the new webmail service uses it by default.

Facebook and Twitter have had support for full-session HTTPS since 2011 and earlier this year they started enabling it by default for all of their users.

The next important step for Yahoo would be to enable HTTPS by default globally across all of its products and services, Access said.

In the meantime, the EFF will attempt to tweak its HTTPS Everywhere browser extension so that it always turns on HTTPS for Yahoo Mail even if users are unaware that the setting exists in their email options.

Join the Good Gear Guide newsletter!

Error: Please check your email address.

Tags Internet-based applications and servicesonline safetyencryptiontwitterinternetprivacyElectronic Frontier FoundationFacebookYahooGoogleMicrosoftsecurityMail

Our Back to Business guide highlights the best products for you to boost your productivity at home, on the road, at the office, or in the classroom.

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Lucian Constantin

IDG News Service
Show Comments

Cool Tech

Lexar® Professional 1000x microSDHC™/microSDXC™ UHS-II cards

Learn more >

D-Link PowerLine AV2 2000 Gigabit Network Kit

Learn more >

ASUS ROG Swift PG279Q – Reign beyond virtual world

Learn more >

Xiro Drone Xplorer V -3 Axis Gimbal & 1080p Full HD 14MP Camera

Learn more >

D-Link TAIPAN AC3200 Ultra Wi-Fi Modem Router (DSL-4320L)

Learn more >

Crucial® BX200 SATA 2.5” 7mm (with 9.5mm adapter) Internal Solid State Drive

Learn more >

Gadgets & Things

Lexar® Professional 1000x microSDHC™/microSDXC™ UHS-II cards

Learn more >


Learn more >

Lexar Professional 2000x SDHC™/SDXC™ UHS-II cards

Learn more >

Family Friendly

ASUS VivoPC VM62 - Incredibly Powerful, Unbelievably Small

Learn more >

Lexar Professional 2000x SDHC™/SDXC™ UHS-II cards

Learn more >

Lexar® Professional 1000x microSDHC™/microSDXC™ UHS-II cards

Learn more >

Stocking Stuffer

Lexar Professional 2000x SDHC™/SDXC™ UHS-II cards

Learn more >

Lexar® Professional 1000x microSDHC™/microSDXC™ UHS-II cards

Learn more >

Christmas Gift Guide

Click for more ›

Most Popular Reviews

Best Deals on Good Gear Guide

Latest News Articles


GGG Evaluation Team

Kathy Cassidy


First impression on unpacking the Q702 test unit was the solid feel and clean, minimalist styling.

Anthony Grifoni


For work use, Microsoft Word and Excel programs pre-installed on the device are adequate for preparing short documents.

Steph Mundell


The Fujitsu LifeBook UH574 allowed for great mobility without being obnoxiously heavy or clunky. Its twelve hours of battery life did not disappoint.

Andrew Mitsi


The screen was particularly good. It is bright and visible from most angles, however heat is an issue, particularly around the Windows button on the front, and on the back where the battery housing is located.

Simon Harriott


My first impression after unboxing the Q702 is that it is a nice looking unit. Styling is somewhat minimalist but very effective. The tablet part, once detached, has a nice weight, and no buttons or switches are located in awkward or intrusive positions.


Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?