Bug 202826

Summary:	remember the milk's register button URL uses unencrypted HTTP protocol
Product:	[Plasma] plasma4	Reporter:	Martin Steigerwald <Martin>
Component:	widget-rememberthemilk	Assignee:	Plasma Bugs List <plasma-bugs>
Status:	RESOLVED FIXED
Severity:	normal	CC:	astromme
Priority:	NOR
Version:	unspecified
Target Milestone:	---
Platform:	Debian testing
OS:	Linux
Latest Commit:		Version Fixed In:

Description Martin Steigerwald 2009-08-06 18:12:46 UTC

Version:            (using KDE 4.3.0)
OS:                Linux
Installed from:    Debian testing/unstable Packages

The remeber the milk applet uses a http:// URL instead of a https:// one for its
register button. It should be changed to a https:// as soon as possible to make
sure that users data is transferred encrypted. HTTPS works with www.rememberthemilk.com.

Comment 1 Martin Steigerwald 2009-08-06 18:16:15 UTC

Does Remember the Milk use HTTPS internally? If not, this should also be changed. I can file another bug report about this.

Comment 2 Andrew Stromme 2009-10-11 19:53:13 UTC

SVN commit 1033988 by astromme:

Use https for the signup link
BUG: 202826


 M  +1 -1      authenticate.ui  


WebSVN link: http://websvn.kde.org/?view=rev&revision=1033988

Comment 3 Andrew Stromme 2009-10-11 20:09:19 UTC

SVN commit 1034000 by astromme:

Backport 1033988 to 4.3.x
CCBUG: 202826


 M  +1 -1      authenticate.ui  


WebSVN link: http://websvn.kde.org/?view=rev&revision=1034000

Comment 4 Martin Steigerwald 2009-10-12 09:14:28 UTC

Thanks for fixing this. Does Remember the Milk use HTTP for its own communication with Remember the Milk also? If so, it might be wise to fix this as well. I can file a different bug report for that so that it doesn't get forgotten.

Comment 5 Andrew Stromme 2009-10-12 18:20:13 UTC

Yes, it at the moment uses https for login and http for transfer. Aaron changed it to https for transfer but that wasn't working at all for me so I reverted it. I need to investigate more, we want things secured. A separate bug report would be appreciated. If you can, feel free to set it as assigned to me right off the bat.