Hi Kinny, On Thu, Feb 5, 2009 at 4:08 PM, Kinny Cheng <[email protected]> wrote:
> Sorry, I didn't realise there was an update available through Sparkle :) > Just installed it, and everything seems to be back where it was before. > Even the drop-down menu statuses have reverted to normal, and the > "Sign-in..." is working again! > > Thanks for fixing that up, Ruben... most appreciated! > Thanks for testing! > > One more question while I have you: for Offline Gmail, is this only usable > for one Mailplane-hosted Gmail account, or for many/multiple? > It works for multiple accounts, I have setup about four "offline" accounts and I can switch between them while being online or offline. Best, > > 2009/2/6 Ruben Bakker <[email protected]> > > The change is in 2.1-beta build 1052. Mailplane->Check for update will load >> it. >> >> >> On Thu, Feb 5, 2009 at 3:17 PM, Kinny Cheng <[email protected]> wrote: >> >>> Hi Ruben, >>> >>> >>>> Mailplane has a small change: >>>> For accounts that don't store their password in the keychain, Mailplane >>>> will always present the authentication dialog the first time you access the >>>> account. You need to be online, too. >>>> >>> >>> As far as I know, this has always been the case with Mailplane - not >>> until I started using Offline Gmail access on one of the accounts, which has >>> led to all the other accounts having their passwords stored in an unknown >>> manner? >>> >>> Are these changes for an upcoming "Cutting Edge" build for 2.1 beta? >>> >>> >>> >>>> >>>> Accounts with a stored password will only ask for a password if you >>>> change the username/ password or when your session expires. >>>> >>>> >>>> On Wed, Feb 4, 2009 at 7:03 PM, Kinny Cheng <[email protected]> wrote: >>>> >>>>> Thanks Ruben! >>>>> Always appreciate your attention to those little details - things that >>>>> make Mailplane so great to use... :) >>>>> >>>>> 2009/2/5 Ruben Bakker <[email protected]> >>>>> >>>>> Hi Kinny, >>>>>> Thanks for your explanation. I think I now understand your >>>>>> requirements. I'll try to find a solution... >>>>>> >>>>>> >>>>>> On Wed, Feb 4, 2009 at 8:32 AM, Kinny Cheng <[email protected]>wrote: >>>>>> >>>>>>> Thanks for the insight, Jesse. >>>>>>> It makes sense that this seems to be what's happening at the moment. >>>>>>> But the fact is, it makes no sense whatsoever to cache authentication >>>>>>> for >>>>>>> accounts other than the one with the offline access enabled. >>>>>>> >>>>>>> And the theory of "allowing Offline access for one, it is on for all" >>>>>>> doesn't fly either. >>>>>>> >>>>>>> Imagine: if I shared a computer with the family, and where everyone >>>>>>> has their own Gmail account/s, this would mean granting me full access >>>>>>> to >>>>>>> all those accounts without me even having to enter in a password, which >>>>>>> is >>>>>>> usually required. >>>>>>> >>>>>>> I agree with Ruben, that Gmail seems to have overlooked the security >>>>>>> implications of offline Gmail access. >>>>>>> >>>>>>> >>>>>>> 2009/2/4 Jesse Read <[email protected]> >>>>>>> >>>>>>> While I am no GMail engineer (or any Google dev at all) I would think >>>>>>>> that based on the way Gears works (via WebKit I believe, hence you >>>>>>>> only need >>>>>>>> to install it via on app and it is available to all WebKit based apps) >>>>>>>> if >>>>>>>> you allow Offline access for one, it is on all - at least in terms of >>>>>>>> cached >>>>>>>> authentication. >>>>>>>> I may be wrong though, in fact I probably am. Ruben should be able >>>>>>>> to get more insight. >>>>>>>> >>>>>>>> -- Jesse >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> On Tue, Feb 3, 2009 at 1:58 PM, Kinny Cheng <[email protected]>wrote: >>>>>>>> >>>>>>>>> Hi Ruben, >>>>>>>>> I'm not sure if I understand you correctly. But... >>>>>>>>> >>>>>>>>> I remember you mentioning previously that passwords are now saved >>>>>>>>>>> for accounts that use Offline Gmail - meaning that, even if I >>>>>>>>>>> didn't choose >>>>>>>>>>> to store my password in Mailplane, Google Gears would still do this >>>>>>>>>>> anyway? >>>>>>>>>>> >>>>>>>>>> >>>>>>>>>> If you enabled the "Store password in Keychain" setting, passwords >>>>>>>>>> are only stored in the keychain. What Gmail stores is a session >>>>>>>>>> cookie, it >>>>>>>>>> doens't contain any username/password. It is used by Gmail to >>>>>>>>>> communicate >>>>>>>>>> with their servers. >>>>>>>>>> >>>>>>>>> >>>>>>>>> I did not elect to have any of my Gmail passwords stored to my >>>>>>>>> keychain. This is because I would prefer to enter my password each >>>>>>>>> time I >>>>>>>>> access a specific Gmail account, per Mailplane session. >>>>>>>>> >>>>>>>>> I am okay with being able to switch between the different accounts >>>>>>>>> freely after I've done the initial authentication. But once I choose >>>>>>>>> to not >>>>>>>>> need the access to email anymore, I just quit Mailplane. The next >>>>>>>>> time I >>>>>>>>> start Mailplane, it'll ask me for my Gmail password - which is what I >>>>>>>>> want, >>>>>>>>> and which has how it's always been since day one. >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>>> >>>>>>>>>> When Online: >>>>>>>>>> If you start Mailplane or switch to an account, Gmail will use the >>>>>>>>>> cookie for the account in question. It takes about 10 days to get the >>>>>>>>>> authentication window again. >>>>>>>>>> >>>>>>>>>> When Offline: >>>>>>>>>> >>>>>>>>>> Gmail directly opens the offline store, neither a password, nor a >>>>>>>>>> cookie is required to access it! See these "Offline Gmail" threads >>>>>>>>>> for more >>>>>>>>>> information: >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> http://groups.google.com/group/gmail-labs-help-offline/browse_thread/thread/231787671b5c72d7# >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> http://groups.google.com/group/gmail-labs-help-offline/browse_thread/thread/0d8c442af1147b97# >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> Mailplane 2.0.1 always authenticates your account before granting >>>>>>>>>> access, even if you had a valid cookie. Because of the new offline >>>>>>>>>> support >>>>>>>>>> this made no sense anymore, as it can only authenticate when online. >>>>>>>>>> This is >>>>>>>>>> why I removed it from 2.1-beta. >>>>>>>>>> >>>>>>>>> >>>>>>>>> This is the part I can't seem to get my head around. But anyway, >>>>>>>>> please fill me in where I may not be understanding you... >>>>>>>>> >>>>>>>>> My dilemma, or rather my question, is this: Why have my other >>>>>>>>> Gmail accounts, with no offline access activated, become openly >>>>>>>>> accessible >>>>>>>>> each time I open Mailplane? >>>>>>>>> >>>>>>>>> I have seven different Gmail accounts, three of which I frequently >>>>>>>>> access, and one of these with the offline access enabled. >>>>>>>>> >>>>>>>>> As per your explanation, I can fully understand why my >>>>>>>>> offline-enabled account no longer requires me to enter a password to >>>>>>>>> access. >>>>>>>>> >>>>>>>>> But for the other two Gmail accounts, it makes no sense whatsoever >>>>>>>>> as to why they are accessible without the usual password >>>>>>>>> authentication >>>>>>>>> anymore - since each account should be mutually exclusive of one >>>>>>>>> another. >>>>>>>>> >>>>>>>>> For example: Each time I start Mailplane, it would open up the >>>>>>>>> offline-enabled Gmail account. When I want to switch to another >>>>>>>>> account, I >>>>>>>>> would usually expect the pop-up dialog and ask me for the respective >>>>>>>>> password (since it's the first time I'm accessing the account for this >>>>>>>>> Mailplane session). But with the latest Beta, it no longer does this >>>>>>>>> and, >>>>>>>>> instead, goes to my account's inbox right away. >>>>>>>>> >>>>>>>>> Hope you understand where I am coming from, and what I'm trying to >>>>>>>>> describe here. >>>>>>>>> >>>>>>>>> >>>>>>>>> Cheers, >>>>>>>>> Kinny >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>>> A stronger security measures for offline data needs to be >>>>>>>>>> implemented by Google. Even if Mailplane would ask you for >>>>>>>>>> Username/Password >>>>>>>>>> and would not store any cookies you could still access your offline >>>>>>>>>> data by >>>>>>>>>> using Safari or any other WebKit browser. >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> For me, no other measures are needed. I have other personal data >>>>>>>>>> stored in my Mac's account. No other user is using my Mac, and I have >>>>>>>>>> password protected my account. >>>>>>>>>> >>>>>>>>>> Maybe you could share some details about your requirements. Do you >>>>>>>>>> have some accounts that you use online only and are more sensitive >>>>>>>>>> than >>>>>>>>>> other you use offline? >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> -- >>>>>>>>>> Ruben >>>>>>>>>> http://mailplaneapp.com/blog >>>>>>>>>> http://www.twitter.com/Mailplane >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>> >>>>>> >>>>>> -- >>>>>> Ruben >>>>>> http://mailplaneapp.com/blog >>>>>> http://www.twitter.com/Mailplane >>>>>> >>>>>> >>>>>> >>>>> >>>>> >>>>> >>>> >>>> >>>> -- >>>> Ruben >>>> http://mailplaneapp.com/blog >>>> http://www.twitter.com/Mailplane >>>> >>>> >>>> >>> >>> >>> >> >> >> -- >> Ruben >> http://mailplaneapp.com/blog >> http://www.twitter.com/Mailplane >> >> >> > > > > -- Ruben http://mailplaneapp.com/blog http://www.twitter.com/Mailplane --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "mailplaneapp" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/mailplaneapp?hl=en -~----------~----~----~----~------~----~------~--~---
