Version: (using KDE 4.3.0) OS: Linux Installed from: Debian testing/unstable Packages The remeber the milk applet uses a http:// URL instead of a https:// one for its register button. It should be changed to a https:// as soon as possible to make sure that users data is transferred encrypted. HTTPS works with www.rememberthemilk.com.
Does Remember the Milk use HTTPS internally? If not, this should also be changed. I can file another bug report about this.
SVN commit 1033988 by astromme: Use https for the signup link BUG: 202826 M +1 -1 authenticate.ui WebSVN link: http://websvn.kde.org/?view=rev&revision=1033988
SVN commit 1034000 by astromme: Backport 1033988 to 4.3.x CCBUG: 202826 M +1 -1 authenticate.ui WebSVN link: http://websvn.kde.org/?view=rev&revision=1034000
Thanks for fixing this. Does Remember the Milk use HTTP for its own communication with Remember the Milk also? If so, it might be wise to fix this as well. I can file a different bug report for that so that it doesn't get forgotten.
Yes, it at the moment uses https for login and http for transfer. Aaron changed it to https for transfer but that wasn't working at all for me so I reverted it. I need to investigate more, we want things secured. A separate bug report would be appreciated. If you can, feel free to set it as assigned to me right off the bat.