If you log into GMail with SSL enabled and let's say your in Canada or another country other than the U.S. , you could be obtaining an SSL certificate that has been modified, which then instructs the mail to be duplicated and sent to a different web server to be read and analyzed.
This has nothing to do with Windows. Read the white paper by the researchers. It's a facinating and worthwhile read.
The best of ZDNet, delivered
ZDNet Newsletters
Get the best of ZDNet delivered straight to your inbox
