Re: Gmail notifier

2007-07-05 Thread MoRpHeUz
Well, it should use SSL using https://

If I'm not wrong, it uses SSL for *login* by default and http:// for
the session. The only problem is that your session could be captured
and also the emails that you are reading, that would let an attacker
to get into your account.

The best way of doing things would be using SSL the whole time.

BR,

On 7/5/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote:
 Hi,
 When travelling with my n800 i sometimes connect to an unknown an
 'un-trusted' wlan. The gmail notifier is i think sending my gmail password
 across this link in plain text. Do people agree that this is a bad thing?

  Is there a way to change this?

  Is the source available?

  Thanks Michael

 ___
 maemo-users mailing list
 maemo-users@maemo.org
 https://lists.maemo.org/mailman/listinfo/maemo-users




-- 
---
Blog: http://labs.morpheuz.eng.br/blog/
PGP: 0xDBEEAAC3 @ wwwkeys.pgp.net
___
maemo-users mailing list
maemo-users@maemo.org
https://lists.maemo.org/mailman/listinfo/maemo-users


Re: Gmail notifier

2007-07-05 Thread Antonio Orlando
That's right, but there's a hidden trick ;)
If you login into:
https://mail.google.com
...the SSL session stays on even after the login.

If Google had done this by default, it probably would have consumed too  
much bandwidth and the costs would have been increased too much for them.

-- 
Antonio
___
maemo-users mailing list
maemo-users@maemo.org
https://lists.maemo.org/mailman/listinfo/maemo-users


Re: Gmail notifier

2007-07-05 Thread MoRpHeUz
 That's right, but there's a hidden trick ;)
 If you login into:
 https://mail.google.com
 ...the SSL session stays on even after the login.

Exactly! =)

-- 
---
Blog: http://labs.morpheuz.eng.br/blog/
PGP: 0xDBEEAAC3 @ wwwkeys.pgp.net
___
maemo-users mailing list
maemo-users@maemo.org
https://lists.maemo.org/mailman/listinfo/maemo-users