Wednesday | 3 December, 2008
The darker side of Webmail
Web-based e-mail may be exposing you to privacy and security problems you didn't expect
Tam Harbert 29/04/2008 10:02:55

This is your life on a server

Finally, what can you do if you have a problem with Webmail? For example, if your e-mails disappear.

That's what happened to Jeneane D. Sessum, a writer and consultant in Atlanta who uses Gmail and several other Google Web-based applications. Last November, a large chunk of the e-mail messages she had stored on Google's server simply disappeared. When she tried to contact Google support, she was directed to its online help forums. She couldn't find an answer there. Then she filled out a contact form to report a technical problem. In reply, she received a form e-mail saying that Google had determined that there was no outage or data problem that would have caused her e-mail to vanish. "That was it," says Sessum. "No advice on what to do." She had to work through her own personal network to reach an actual person at Google, someone in technical support. "But still nobody could tell me anything except that nothing was wrong on their end."

How to protect yourself
  • Do: Use a strong password that is unique to your e-mail account and change it frequently. (You can use services such as Security Stats Com's Password Security Web applet to check your password's effectiveness.)

  • Do: Change your password and contact the Webmail provider immediately if you suspect your account has been hacked or hijacked.

  • Do: Keep a separate backup of your Webmail. One way is to configure your Webmail to forward a copy of everything to another e-mail account. In addition, Google offers instructions on how to back up your e-mail to your POP3 e-mail client.

  • Do: Find out how the service provider protects your data in transit and in storage. For example, does it provide an option to use SSL encryption when sending an e-mail? Does it encrypt the data on its servers? Are there backups in case those servers fail?

  • Don't: Use your Webmail address as a sign-on for other accounts. If you do and your Webmail is hacked, then the hacker will automatically have access to those other accounts.

  • Don't: Use your Webmail as storage for your old e-mail unless you're completely comfortable doing so. You're better off backing up your e-mail to a local hard drive and then deleting it from the service.

  • Do: Be cautious when checking your Webmail on public terminals in places like airports, libraries, etc. Make sure you haven't left any cookies and clear your private data (such as cache and browsing history). And remember that your work computer is not private.

  • Do: Use a secure HTTPS connection whenever possible.

Sessum wishes Google could be more responsive, especially to users like her who are basing their small businesses on its platforms. "I don't buy this line that these are free services and so you get what you pay for," she says. "They make money off of me by serving ads up every time I send an e-mail." She says she'd gladly pay Google some type of premium fee that would get her better support and perhaps guaranteed backups of her e-mail.

Google's Grant won't discuss individual problems like Sessum's, citing user privacy. Google can sometimes restore deleted e-mail, she says, depending on how much time has passed. Ultimately, Google permanently deletes it, but she won't specify the amount of time that Google waits before doing that. "We must strike this balance between, on the one hand, keeping that e-mail around just in case of situations like this so that we could recover the e-mail for the user and, on the other hand, doing what the user has told us to do when they tell us to delete the e-mail," she says.

Tellingly, Sessum still uses Gmail and her other Google apps. Indeed, most users seem willing to accept the trade-offs in exchange for the features, usability and accessibility of these services. Sessum, for example, admits that she should have been more conscientious about keeping her own backup of her Gmails. Ironically, she's configured her Gmail account to forward a copy of everything to her Yahoo Mail. "So my backup to my Web-based e-mail is another Web-based e-mail account," she admits.

Tam Harbert is a Washington-based freelance journalist. Her last piece was Confessions of a Cobol programmer.

Computerworld Buyer's Guide - Vendors Matched to this Article
Computerworld Buyer's Guide - Vendors Matched to this Article
Additional Resources
Executive Guides
Whitepapers
Zones
Zone logoZones provide focussed content from Computerworld and leading technology partners.
Newsletter Subscription
Sign up for our Computerworld newsletters!
RSS Feeds
Market Place

 

Smart SOA World Tour

Discover how SOA can create smarter outcomes for your business.

Attend and learn:

  • How SOA is helping leading companies to become more agile
  • Where you should be applying SOA processes in your company
  • The top SOA implementation mistakes to avoid

Click here for more information.
Whitepaper

Everything you need to know about email and web security (but were afraid to ask)

What you don’t know can destroy your business. It’s hard to imagine modern business without the internet but in the last few years it has become fraught with danger. Read on to discover how internet security can give your business a competitive advantage.

Enterprise IT Buyer's Guide
Find Technology Vendors Fast
 
Find vendors by name | Find by category
Sponsored Links