Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!


Click here to return to the 'Use this hint to avoid having your mail password go in cleartext' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
Use this hint to avoid having your mail password go in cleartext
Authored by: macciius on Sep 15, '05 09:59:27AM
Thank you very much for the hint! I am surprized the wizard works the way it does: i.e. asks you for the account information without any way to request that the connection is encrypted. Since it then tries to log into the mail server, to verify what you entered, I assume that the password is flying on the network in cleartext at least once. Yes, you can immediately go into Prefs -> Accounts -> Advanced and check off the "Use SSL" box, but if anyone has been "listening" during the time when you went through the wizard, they already have the password to your mail server. And these days it is not safe to assume that nobody is sniffing your network, especially a wireless one. So, do use this hint, and -- even better -- pressure Apple to have the wizard ask you about encryption. Trading off security for a slightly less complex setup process seems reckless to me.

[ Reply to This | # ]