Hi Kinny, On Tue, Feb 3, 2009 at 4:09 PM, Kinny Cheng <[email protected]> wrote:
> Hi Ruben, > Just want some clarification on this one... > > I remember you mentioning previously that passwords are now saved for > accounts that use Offline Gmail - meaning that, even if I didn't choose to > store my password in Mailplane, Google Gears would still do this anyway? > If you enabled the "Store password in Keychain" setting, passwords are only stored in the keychain. What Gmail stores is a session cookie, it doens't contain any username/password. It is used by Gmail to communicate with their servers. When Online: If you start Mailplane or switch to an account, Gmail will use the cookie for the account in question. It takes about 10 days to get the authentication window again. When Offline: Gmail directly opens the offline store, neither a password, nor a cookie is required to access it! See these "Offline Gmail" threads for more information: http://groups.google.com/group/gmail-labs-help-offline/browse_thread/thread/231787671b5c72d7# http://groups.google.com/group/gmail-labs-help-offline/browse_thread/thread/0d8c442af1147b97# Mailplane 2.0.1 always authenticates your account before granting access, even if you had a valid cookie. Because of the new offline support this made no sense anymore, as it can only authenticate when online. This is why I removed it from 2.1-beta. A stronger security measures for offline data needs to be implemented by Google. Even if Mailplane would ask you for Username/Password and would not store any cookies you could still access your offline data by using Safari or any other WebKit browser. For me, no other measures are needed. I have other personal data stored in my Mac's account. No other user is using my Mac, and I have password protected my account. Maybe you could share some details about your requirements. Do you have some accounts that you use online only and are more sensitive than other you use offline? > But what I've also found now is that my other accounts, which do not have > Offline Gmail enabled, are also behaving in the very same manner. > > Is this an issue, or a downside of using Offline Gmail for a single account > that will inherently affect others being used by Mailplaine too? > Cheers, > > > Cheers, > K > > > > > -- Ruben http://mailplaneapp.com/blog http://www.twitter.com/Mailplane --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "mailplaneapp" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/mailplaneapp?hl=en -~----------~----~----~----~------~----~------~--~---
