On Mon, 2013-05-20 at 06:24 -0300, Juan Antonio Zuloaga Mellino wrote:
> As ssl is now mandatory, after some lab work I managed to mitm an Ipod
> Touch.
> It uses as addressbook/database : 
> https://google.com/carddav/v1/principals/[username]%
> 40gmail.com/lists/default/
> where [username] is the gmail user.
> 
> 
> In case of future user-agent filtering, ios uses:
> iOS/6.1 (10B144) dataaccessd/1.0

That URL works for me here when using an account on a Google Apps
instance, using HTTP authentication. It fails for a normal GMail account
because Google requires authentication via GoogleLogin, which is the new
OAuth mechanism.

The filtering is not based on a user-agent string. Instead the app has
to be registered with Google and has to present a valid, known private
key during SyncEvolution.

SyncEvolution can't do that because a) it is not registered (Google has
not replied to my requests to accept SyncEvolution as client) and b) the
necessary code for the new authentication mechanism hasn't been written.


-- 
Best Regards, Patrick Ohly

The content of this message is my personal opinion only and although
I am an employee of Intel, the statements I make here in no way
represent Intel's position on the issue, nor am I authorized to speak
on behalf of Intel on this matter.


_______________________________________________
SyncEvolution mailing list
[email protected]
https://lists.syncevolution.org/mailman/listinfo/syncevolution

Reply via email to