Bug 1173 – Mnotify's link to Gmail should be https instead of http

Bug 1173 - (int-76421) Mnotify's link to Gmail should be https instead of http

(int-76421)
Summary:	Mnotify's link to Gmail should be https instead of http

Status:	RESOLVED WONTFIX

Product:	Statusbar Widgets
Component:	Webmail Notifier
Version:	unspecified
Platform:	All All

Importance:	Low enhancement with 3 votes (vote)
Target Milestone:	---
Assigned To:	unassigned
QA Contact:	webmail-notifier-bugs

URL:
Keywords:	easyfix

Depends on:
Blocks:
	Show dependency tree

Reported:	2007-03-24 14:10 UTC by Oskari Ojala
Modified:	2009-09-18 23:15 UTC (History)
CC List:	3 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note

You need to log in before you can comment on or make changes to this bug.

Description Oskari Ojala (reporter) 2007-03-24 14:10:57 UTC

Should the addons bugs even be reported here? I'll give it a try.
I was unable to Cc internet-tablet-addons@nokia.com.

Mnotify's "View inbox" link to Gmail uses http, not https. As many public WLAN
APs don't have encryption it would be good to have at least an option to use SSL
in the connection.

This also applies to the polling the app does.

Comment 1 Jake Kunnari 2007-04-16 19:34:53 UTC

I have installed mnotify version 1.3 and that uses https. Status changed to 
worksforme.

Comment 2 Oskari Ojala (reporter) 2007-04-21 22:46:45 UTC

Bug reopened.

The "View inbox" still links to http://mail.google.com/mail, which then
redirects to
https://www.google.com/accounts/Ser....continue=http%3A%2F%2Fmail.google.com...
for a secure login. After login the user is directed back to a non-encrypted
page at mail.google.com.

This means that the first link is NOT using https and due to that the page after
login is also NOT using https.

Could you please link the "View inbox" to https://mail.google.com/mail instead
so that the Gmail would be encrypted by default, not just its login.

Comment 3 Jake Kunnari 2007-11-20 11:01:07 UTC

Bug report accepted. Alias field updated.

Comment 4 Jussi Kukkonen 2007-11-20 14:22:18 UTC

I agree with reporter, but similar bug on the gmail-bookmark was WONTFIXed for
performance reasons: bug 1967

Comment 5 Oskari Ojala (reporter) 2007-11-20 22:26:10 UTC

There are some very important differences. Mnotify is in regular contact with
Gmail, bookmark is not. The bookmark can be changed by the user. Mnotify's link
or the polling URL cannot be changed (not in the GUI options at least).

If you won't change the default behaviour then at least consider adding an
option "[ ] use SSL" to the options. But I would find it quite unbelievable to
prioritize speed over the security of personal communications.

Comment 6 Alec Robertson 2008-07-02 01:36:50 UTC

Could there be a configuration option to change the gmail url? Currently I
prefer the mobile gmail over the one included in mnotify (which takes an age to
load on the n810 while the mobile gmail is very fast)

Comment 7 Andre Klapper maemo.org

2008-07-02 12:14:20 UTC

Alec: I think you can't easily do it

Comment 8 Alec Robertson 2008-07-04 01:23:20 UTC

This is the url, just in case there's something that can be done :)
  http://mail.google.com/mail/x/?source=mobileproducts&dc=gorganic

Comment 9 Andre Klapper maemo.org

2008-07-04 19:24:40 UTC

Alec: Interested in asking Google themselves to fix this upstream? Sounds like
the most reasonable plan to me.

Comment 10 Andre Klapper maemo.org

2008-07-04 19:25:18 UTC

Argh. Ignore my last comment, please.

Comment 11 Alec Robertson 2008-07-06 23:21:02 UTC

While we're at it, any chance of switching the LED on like with the modest
browser? I'm trying to use mnotify as a drop-in replacement for modest as it
seems to crash a lot and is pretty slow to load the emails that it displays in
the little box.

Comment 12 Oskari Ojala (reporter) 2008-07-26 00:51:25 UTC

(In reply to comment #11)

That's another feature request, please file a separate entry for it.

Comment 13 Oskari Ojala (reporter) 2008-07-26 00:57:27 UTC

Google Mail now has an option to always use https.
http://gmailblog.blogspot.com/2008/07/making-security-easier.html

It makes this almost 500-day old bug quite unnecessary.

Comment 14 Andre Klapper maemo.org

2008-08-04 17:37:22 UTC

Probably WONTFIX as per last comment, until someone comes up with a patch.

Comment 15 Quim Gil nokia

2008-12-30 01:08:53 UTC

wontfix, then

Next time we need to ensure that the developers of these add-ons are able to
react to community feedback.

Comment 16 Andre Klapper maemo.org

2009-09-18 23:15:14 UTC

(Splitting product "Home applets" into "Desktop widgets" and "Statusbar
widgets".
Sorry for the bugmail noise. You can filter by searching for this comment.)