That's right, but there's a "hidden" trick ;) If you login into: https://mail.google.com ...the SSL session stays on even after the login. If Google had done this by default, it probably would have consumed too much bandwidth and the costs would have been increased too much for them. -- Antonio