New To Mac-Forums?

Welcome to our community! Join the discussion today by registering your FREE account. If you have any problems with the registration process, please contact us!

Get your questions answered by community gurus Advice and insight from world-class Apple enthusiasts Exclusive access to members-only contests, giveaways and deals

Join today!

 
Start a Discussion
 

Mac-Forums Brief

Subscribe to Mac-Forums Brief to receive special offers from Mac-Forums partners and sponsors

Join the conversation RSS
OS X - Apps and Games Discussion of applications and games available for Mac OS X.

MacMail New Account Connects to Server Without SSL Transmits Password in Plain Text


Post Reply New Thread Subscribe

 
Thread Tools
bluesky2

 
Member Since: Nov 04, 2013
Posts: 1
bluesky2 is on a distinguished road

bluesky2 is offline
I noticed that whenever you set up a new mail account that as soon as you enter the server and the account password, Mac Mail tries to connect to the mail server (i.e. where your email account is hosted). However this connection occurs before you can set the SSL option. So it looks like the initial connection transmits the mail account password as plain text.

It looks to me like all Apple devices (i.e. iPhones, iPads, Mac Computers) use basically the same process, and appear to be trying to make an initial connection to the mail server without using SSL.

This seems like a very insecure configuration. If this is in fact what is happening (and I don't see any evidence to the contrary) then this is a pretty major security flaw. It would mean that users of Mac Mail applications could easily have their passwords read by their ISPs or anyone else who had access to the line during that set up phase.

Any security experts care to comment.
QUOTE Thanks

Post Reply New Thread Subscribe


« Onyx for Mavericks | Billed by iTunes for AirDrop Transfer »
Thread Tools

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off
Forum Jump

Similar Threads
Thread
Thread Starter
Forum
Replies
Last Post
Reset User password in server app not working ashdatla Other Hardware and Peripherals 0 05-20-2013 10:40 AM
Finder won't start laurag OS X - Operating System 5 04-13-2012 05:46 PM
Reset Password or create new admin account davalco OS X - Operating System 8 07-07-2011 04:45 PM
Mail Error: IMAP Server FAIL due to Password Error - But password is CORRECT!?! zschwarzmiller OS X - Apps and Games 6 10-23-2010 02:36 AM
Problems with MySQL scorpionbilli Web Design and Hosting 18 04-29-2008 07:07 PM

All times are GMT -4. The time now is 06:48 PM.

Powered by vBulletin
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
X

Welcome to Mac-Forums.com

Create your username to jump into the discussion!

New members like you have made this community the ultimate source for your Mac since 2003!


(4 digit year)

Already a member?