202826 2009-08-06 18:12:46 +0000 remember the milk's register button URL uses unencrypted HTTP protocol 2009-10-12 18:20:13 +0000 1 1 10 Unmaintained plasma4 widget-rememberthemilk unspecified Debian testing Linux RESOLVED FIXED NOR normal --- 1 Martin plasma-bugs-null astromme 0 oldest_to_newest 807453 0 Martin 2009-08-06 18:12:46 +0000 Version: (using KDE 4.3.0) OS: Linux Installed from: Debian testing/unstable Packages The remeber the milk applet uses a http:// URL instead of a https:// one for its register button. It should be changed to a https:// as soon as possible to make sure that users data is transferred encrypted. HTTPS works with www.rememberthemilk.com. 807458 1 Martin 2009-08-06 18:16:15 +0000 Does Remember the Milk use HTTPS internally? If not, this should also be changed. I can file another bug report about this. 843566 2 astromme 2009-10-11 19:53:13 +0000 SVN commit 1033988 by astromme: Use https for the signup link BUG: 202826 M +1 -1 authenticate.ui WebSVN link: http://websvn.kde.org/?view=rev&revision=1033988 843589 3 astromme 2009-10-11 20:09:19 +0000 SVN commit 1034000 by astromme: Backport 1033988 to 4.3.x CCBUG: 202826 M +1 -1 authenticate.ui WebSVN link: http://websvn.kde.org/?view=rev&revision=1034000 843813 4 Martin 2009-10-12 09:14:28 +0000 Thanks for fixing this. Does Remember the Milk use HTTP for its own communication with Remember the Milk also? If so, it might be wise to fix this as well. I can file a different bug report for that so that it doesn't get forgotten. 844071 5 astromme 2009-10-12 18:20:13 +0000 Yes, it at the moment uses https for login and http for transfer. Aaron changed it to https for transfer but that wasn't working at all for me so I reverted it. I need to investigate more, we want things secured. A separate bug report would be appreciated. If you can, feel free to set it as assigned to me right off the bat.