Sorry, I didn't realise there was an update available through Sparkle :) Just installed it, and everything seems to be back where it was before. Even the drop-down menu statuses have reverted to normal, and the "Sign-in..." is working again!
Thanks for fixing that up, Ruben... most appreciated! One more question while I have you: for Offline Gmail, is this only usable for one Mailplane-hosted Gmail account, or for many/multiple? 2009/2/6 Ruben Bakker <[email protected]> > The change is in 2.1-beta build 1052. Mailplane->Check for update will load > it. > > > On Thu, Feb 5, 2009 at 3:17 PM, Kinny Cheng <[email protected]> wrote: > >> Hi Ruben, >> >> >>> Mailplane has a small change: >>> For accounts that don't store their password in the keychain, Mailplane >>> will always present the authentication dialog the first time you access the >>> account. You need to be online, too. >>> >> >> As far as I know, this has always been the case with Mailplane - not until >> I started using Offline Gmail access on one of the accounts, which has led >> to all the other accounts having their passwords stored in an unknown >> manner? >> >> Are these changes for an upcoming "Cutting Edge" build for 2.1 beta? >> >> >> >>> >>> Accounts with a stored password will only ask for a password if you >>> change the username/ password or when your session expires. >>> >>> >>> On Wed, Feb 4, 2009 at 7:03 PM, Kinny Cheng <[email protected]> wrote: >>> >>>> Thanks Ruben! >>>> Always appreciate your attention to those little details - things that >>>> make Mailplane so great to use... :) >>>> >>>> 2009/2/5 Ruben Bakker <[email protected]> >>>> >>>> Hi Kinny, >>>>> Thanks for your explanation. I think I now understand your >>>>> requirements. I'll try to find a solution... >>>>> >>>>> >>>>> On Wed, Feb 4, 2009 at 8:32 AM, Kinny Cheng <[email protected]>wrote: >>>>> >>>>>> Thanks for the insight, Jesse. >>>>>> It makes sense that this seems to be what's happening at the moment. >>>>>> But the fact is, it makes no sense whatsoever to cache authentication >>>>>> for >>>>>> accounts other than the one with the offline access enabled. >>>>>> >>>>>> And the theory of "allowing Offline access for one, it is on for all" >>>>>> doesn't fly either. >>>>>> >>>>>> Imagine: if I shared a computer with the family, and where everyone >>>>>> has their own Gmail account/s, this would mean granting me full access to >>>>>> all those accounts without me even having to enter in a password, which >>>>>> is >>>>>> usually required. >>>>>> >>>>>> I agree with Ruben, that Gmail seems to have overlooked the security >>>>>> implications of offline Gmail access. >>>>>> >>>>>> >>>>>> 2009/2/4 Jesse Read <[email protected]> >>>>>> >>>>>> While I am no GMail engineer (or any Google dev at all) I would think >>>>>>> that based on the way Gears works (via WebKit I believe, hence you only >>>>>>> need >>>>>>> to install it via on app and it is available to all WebKit based apps) >>>>>>> if >>>>>>> you allow Offline access for one, it is on all - at least in terms of >>>>>>> cached >>>>>>> authentication. >>>>>>> I may be wrong though, in fact I probably am. Ruben should be able to >>>>>>> get more insight. >>>>>>> >>>>>>> -- Jesse >>>>>>> >>>>>>> >>>>>>> >>>>>>> On Tue, Feb 3, 2009 at 1:58 PM, Kinny Cheng <[email protected]>wrote: >>>>>>> >>>>>>>> Hi Ruben, >>>>>>>> I'm not sure if I understand you correctly. But... >>>>>>>> >>>>>>>> I remember you mentioning previously that passwords are now saved >>>>>>>>>> for accounts that use Offline Gmail - meaning that, even if I didn't >>>>>>>>>> choose >>>>>>>>>> to store my password in Mailplane, Google Gears would still do this >>>>>>>>>> anyway? >>>>>>>>>> >>>>>>>>> >>>>>>>>> If you enabled the "Store password in Keychain" setting, passwords >>>>>>>>> are only stored in the keychain. What Gmail stores is a session >>>>>>>>> cookie, it >>>>>>>>> doens't contain any username/password. It is used by Gmail to >>>>>>>>> communicate >>>>>>>>> with their servers. >>>>>>>>> >>>>>>>> >>>>>>>> I did not elect to have any of my Gmail passwords stored to my >>>>>>>> keychain. This is because I would prefer to enter my password each >>>>>>>> time I >>>>>>>> access a specific Gmail account, per Mailplane session. >>>>>>>> >>>>>>>> I am okay with being able to switch between the different accounts >>>>>>>> freely after I've done the initial authentication. But once I choose >>>>>>>> to not >>>>>>>> need the access to email anymore, I just quit Mailplane. The next >>>>>>>> time I >>>>>>>> start Mailplane, it'll ask me for my Gmail password - which is what I >>>>>>>> want, >>>>>>>> and which has how it's always been since day one. >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>>> >>>>>>>>> When Online: >>>>>>>>> If you start Mailplane or switch to an account, Gmail will use the >>>>>>>>> cookie for the account in question. It takes about 10 days to get the >>>>>>>>> authentication window again. >>>>>>>>> >>>>>>>>> When Offline: >>>>>>>>> >>>>>>>>> Gmail directly opens the offline store, neither a password, nor a >>>>>>>>> cookie is required to access it! See these "Offline Gmail" threads >>>>>>>>> for more >>>>>>>>> information: >>>>>>>>> >>>>>>>>> >>>>>>>>> http://groups.google.com/group/gmail-labs-help-offline/browse_thread/thread/231787671b5c72d7# >>>>>>>>> >>>>>>>>> >>>>>>>>> http://groups.google.com/group/gmail-labs-help-offline/browse_thread/thread/0d8c442af1147b97# >>>>>>>>> >>>>>>>>> >>>>>>>>> Mailplane 2.0.1 always authenticates your account before granting >>>>>>>>> access, even if you had a valid cookie. Because of the new offline >>>>>>>>> support >>>>>>>>> this made no sense anymore, as it can only authenticate when online. >>>>>>>>> This is >>>>>>>>> why I removed it from 2.1-beta. >>>>>>>>> >>>>>>>> >>>>>>>> This is the part I can't seem to get my head around. But anyway, >>>>>>>> please fill me in where I may not be understanding you... >>>>>>>> >>>>>>>> My dilemma, or rather my question, is this: Why have my other Gmail >>>>>>>> accounts, with no offline access activated, become openly accessible >>>>>>>> each >>>>>>>> time I open Mailplane? >>>>>>>> >>>>>>>> I have seven different Gmail accounts, three of which I frequently >>>>>>>> access, and one of these with the offline access enabled. >>>>>>>> >>>>>>>> As per your explanation, I can fully understand why my >>>>>>>> offline-enabled account no longer requires me to enter a password to >>>>>>>> access. >>>>>>>> >>>>>>>> But for the other two Gmail accounts, it makes no sense whatsoever >>>>>>>> as to why they are accessible without the usual password authentication >>>>>>>> anymore - since each account should be mutually exclusive of one >>>>>>>> another. >>>>>>>> >>>>>>>> For example: Each time I start Mailplane, it would open up the >>>>>>>> offline-enabled Gmail account. When I want to switch to another >>>>>>>> account, I >>>>>>>> would usually expect the pop-up dialog and ask me for the respective >>>>>>>> password (since it's the first time I'm accessing the account for this >>>>>>>> Mailplane session). But with the latest Beta, it no longer does this >>>>>>>> and, >>>>>>>> instead, goes to my account's inbox right away. >>>>>>>> >>>>>>>> Hope you understand where I am coming from, and what I'm trying to >>>>>>>> describe here. >>>>>>>> >>>>>>>> >>>>>>>> Cheers, >>>>>>>> Kinny >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>>> A stronger security measures for offline data needs to be >>>>>>>>> implemented by Google. Even if Mailplane would ask you for >>>>>>>>> Username/Password >>>>>>>>> and would not store any cookies you could still access your offline >>>>>>>>> data by >>>>>>>>> using Safari or any other WebKit browser. >>>>>>>>> >>>>>>>>> >>>>>>>>> For me, no other measures are needed. I have other personal data >>>>>>>>> stored in my Mac's account. No other user is using my Mac, and I have >>>>>>>>> password protected my account. >>>>>>>>> >>>>>>>>> Maybe you could share some details about your requirements. Do you >>>>>>>>> have some accounts that you use online only and are more sensitive >>>>>>>>> than >>>>>>>>> other you use offline? >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> -- >>>>>>>>> Ruben >>>>>>>>> http://mailplaneapp.com/blog >>>>>>>>> http://www.twitter.com/Mailplane >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>> >>>>>> >>>>>> >>>>> >>>>> >>>>> -- >>>>> Ruben >>>>> http://mailplaneapp.com/blog >>>>> http://www.twitter.com/Mailplane >>>>> >>>>> >>>>> >>>> >>>> >>>> >>> >>> >>> -- >>> Ruben >>> http://mailplaneapp.com/blog >>> http://www.twitter.com/Mailplane >>> >>> >>> >> >> >> > > > -- > Ruben > http://mailplaneapp.com/blog > http://www.twitter.com/Mailplane > > > > --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "mailplaneapp" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/mailplaneapp?hl=en -~----------~----~----~----~------~----~------~--~---
