Bug 269139 - akonadi-googledata uses unsecure HTTP
Summary: akonadi-googledata uses unsecure HTTP
Status: RESOLVED UNMAINTAINED
Alias: None
Product: Akonadi
Classification: Frameworks and Libraries
Component: GoogleData Resource (show other bugs)
Version: 1.2.0
Platform: Gentoo Packages Linux
: NOR wishlist
Target Milestone: ---
Assignee: Adenilson Cavalcanti
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-03-22 14:30 UTC by Matt Whitlock
Modified: 2018-08-27 21:53 UTC (History)
3 users (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Matt Whitlock 2011-03-22 14:30:04 UTC
Version:           1.2.0 (using KDE 4.6.1) 
OS:                Linux

Since authentication credentials are transmitted when synchronizing Google contacts and calendar, akonadi-googledata should be using HTTPS.  It is currently using HTTP.

tcp6       0      1 2001:470:#:#:#:#:#:#:60513 2001:4860:800c::93:80   SYN_SENT    1717/akonadi_google 
tcp6       0      1 2001:470:#:#:#:#:#:#:60514 2001:4860:800c::93:80   SYN_SENT    1716/akonadi_gcal_r 

You can clearly see in this netstat output that akonadi-googledata is connecting on port 80.

Reproducible: Didn't try

Steps to Reproduce:
Use akonadi-googledata as an Akonadi resource.

Actual Results:  
Akonadi-googledata connects on port 80 (http).

Expected Results:  
Akonadi-googledata connects on port 443 (https).
Comment 1 Daniel Vrátil 2018-08-27 21:53:54 UTC
The replacement Google resources use HTTPS everywhere.