Almost two years ago, I bemoaned the fact Yahoo were creating new things, but were still the only major mail provider to not offer SSL. On an unsecured wireless network, this is an open invitation for anyone to hijack your session.

Well, they finally listened!

Activating SSL adds an extra layer of security to your account. While using SSL protection is optional, we recommend it if you are on an unsecured internet connect, such as a wireless network at a cafe.

It’s a step in the right direction, but it desperately needs to be enabled by default. As a developer and sysadmin I know most people don’t change default settings, which means most of their users will still be unprotected.