up vote 6 down vote favorite
share [g+] share [fb]

Why is Yahoo Mail behind in security? They don't support HTTPS yet. Gmail and many others do. I'm shocked that Yahoo still doesn't have HTTPS. Why is this? What is the logic behind not supporting HTTPS in their mail client?

link|improve this question
0% accept rate
Yahoo Mail is way behind; after all these years they still do not support right-to-left properly. – Itamar May 1 '11 at 8:47
feedback

migrated from superuser.com May 1 '11 at 5:20

This question came from our site for computer enthusiasts and power users.

4 Answers

up vote 6 down vote

What is the logic behind not supporting HTTPS in their mail client?

The encryption takes CPU time, which means more and/or bigger servers, which cost more money. Supporting HTTPS may also require a more complex infrastructure for load balancing and caching. Since most users don't care much about security, I guess Yahoo decided that it's not worth the investment.

link|improve this answer
Ahhhhh this might just be the logic behind it! – Daniel Dec 16 '09 at 4:43
feedback
up vote 2 down vote

Yahoo! Mail does support HTTPS. See details here.

link|improve this answer
2  
Are you sure it stays in https after login? I don't have Yahoo mail account so I can't check. – harrymc Dec 8 '09 at 20:49
6  
The login page is under https, but it's regular old http after you log in. – Chris Dwyer Dec 8 '09 at 21:04
1  
There is some javascript, however, on the after log in page that does access https URLs... so maybe its AJAX e-mail retrieval is https. – Chris Dwyer Dec 8 '09 at 21:06
2  
When logging in it is secure but once in it isn't. – Daniel Dec 16 '09 at 4:44
feedback
up vote 1 down vote

Here is an link to an article from 2008 when Yahoo had released SSL support, then rolled it back:

http://www.tmcnet.com/news/2008/06/12/3494864.htm

link|improve this answer
I think that article is about supporting SSL for POP acces, while the question seems to be about the web frontend. – Michael Borgwardt Dec 9 '09 at 11:09
feedback
up vote 1 down vote

After login, if you just add the "s" in the URL (http:// -> https://), it will just work. (See the image below.)

enter image description here

But you can't access Yahoo Messenger (the web version), Facebook Friends, and Applications if you are on HTTPS. These are now accessible (30/04/2012).

With HTTPS:                 Without HTTPS:

enter image description here enter image description here

link|improve this answer
I can access all those things in https. – Derek Apr 30 at 5:28
@Derek Yeah, true, for about a week I can access them as well. – Alex Apr 30 at 5:33
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.