Thank you for the report.

The behavior you are observing is a result of Gmail caching email content for efficiency. The same can be observed if you lose your network connection with an active Gmail session, and find you still have some limited access to your email. Gmail doesn't know that its session has been logged out until it attempts to fetch more content, which is not always immediate.

We don't consider this a security problem, and accordingly I am closing this bug. It is a local attack (see Chrome Security FAQ: https://www.chromium.org/Home/chromium-security/security-faq#TOC-Why-aren-t-physically-local-attacks-in-Chrome-s-threat-model-), in that exposure only occurs when you have left open a browser session and somebody else can use the computer. It is not substantively different then an attacker flipping over to the tab and seeing the names of people who have sent you emails along with the email subject lines (which requires no ability to open cached emails).

I understood that Issue 1 explained is the behavior implemented by Google.
Could you please let me know why is the user logged out from the second account he logged into, though it's not related to security.

Thanks
Heena Ghai

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot