We, (at least me) have so high regards for Gmail that it always uses a secure connection (https), BUT that not the truth !!! The secure connection (https) is used only when we login, so our password is safe. After that, Gmail switches back to normal http connection and all our messages and chats goes in plan text. Anyone can sniff it. How to secure your chat and messages in Gmail: 1. Login into Gmail -> Settings -> General -> Browser Connection, Select "Always use https". PS: There is no free lunch. This setting will slow down your Gmail connection a bit as all the data now going in encrypted format.