Slashdot Mirror


Google To Deprecate SSLv3, RC4 in Gmail IMAP/POP Clients (threatpost.com)

Michael Mimoso, reporting for Threatpost: Google said that it will initiate on June 16 a gradual deprecation of SSLv3 and RC4 for Gmail IMAP/POP mail clients. Both the crypto protocols cipher are notoriously unsafe and are being phased out in big chunks of the Internet. Google, for its part, had already announced in May that it would no longer support SSLv3 and RC4 connections for Gmail SMTP. Google does note that most mail clients already default to safer TLS connections, and most will not be affected by the impending changes."Unlike Gmail SMTP, this change will be rolled out as a gradual change, where it may take longer than 30 days for users to be fully restricted from connecting to Gmail from SSLv3 or RC4 connections; however, we recommend updating your clients soon in order to avoid any potential disruption," Google said in an announcement.

8 of 25 comments (clear)

  1. Google to slowly make GMail irrelevant by Anonymous Coward · · Score: 1

    Can't tell you how many clients can't actually access Gmail IMAP without "downgrading its security settings" because of their insistence on OAuth.

  2. Re: Is this going to affect... by LichtSpektren · · Score: 1

    No. Linux is already incapable of connecting to modern email systems like Gmail. This will not change anything in anyway you will notice.

    Pray tell, what OS kernels have POP3/IMAP built in? Pretty sure it's not Windows, anything POSIX or iOS, because all of them rely on userspace tools for email.

  3. Re: Why, moderators? by LichtSpektren · · Score: 2

    I suppose one of the bigoted moderators really didn't like my question. No surprise here.

    It might have something to do with the fact that your comment was 100% off-topic.

  4. Re:Old people are left behind by LichtSpektren · · Score: 2

    My parents are 60+ years old and used Outlook Express exclusively. To teach them to use another client will be almost impossible. I don't think they were ever in danger for only using SSL.

    Please do your parents a favor and move them off of Windows XP. It will take work and lots of aggravation no doubt, but their safety is worth that.

  5. Re: Is this going to affect... by wonkey_monkey · · Score: 1

    "Windows" is just as incapable of connecting to Gmail as "Linux" is.

    --
    systemd is Roko's Basilisk.
  6. Re:Old people are left behind by ModernGeek · · Score: 1

    Get them an iPad

    --
    Sig: I stole this sig.
  7. Re:Old people are left behind by eam3 · · Score: 1

    My father is 88 years old and my mom is 79, both are as computer illiterate as your average user. They both used Outlook Express for years. A few years ago I moved them to W7 (and now W10) and they both adapted to Outlook just fine.

  8. Re:Old people are left behind by LichtSpektren · · Score: 1

    Please do your parents a favor and move them off of Windows XP. It will take work and lots of aggravation no doubt, but their safety is worth that.

    Wow, some great FUD there. How is XP so horribly worse than all the other OSes, pray tell? And what is the balance between prefect security, the misery of the elderly who are "just trying to send an email", and the unbelievably minuscule chance they'll get hacked because of XP, not because of email phishing or web ads?

    "Unbelievably minuscule chance they'll get hacked..." right. For all of us who have to suffer to botnet DDoS attacks because of people like you, please move your parents off of an OS that no longer receives security updates. They may be interested in Ubuntu or Linux Mint if you explain it to them well.