[sip-comm-issues] [Issue 805] potential security issue for gtalk accounts

emcho at dev.java.net emcho at dev.java.net
Mon Mar 15 12:32:19 CET 2010


------- Additional comments from emcho at dev.java.net Mon Mar 15 11:32:18 +0000 2010 -------
> Right now there is no any kind of indication weather TLS is used to connect to
google servers via jabber.

Note that there is no other way to connect to google servers other than using a
secure connection. 

Furthermore, while the padlock icon is commonly used on browsers to for websites
using https, I am unaware of any clients employing a similar concept. A warning
for unsecure connections might make more sense, but wouldn't be that
straightforward given that some protocols we support don't even have complete
support for security. 

To sum up, we'd need to reach a decision over the mailing lists before opening
an issue so please raise the issue there. 

> Note: was reported on mailing list but no replies.

I am sorry this happened. Could you please resume your post on the mailing list,
and I'll make sure it doesn't go unnoticed. Posting a link here to the archives
of your first post would also be appreciated.

To unsubscribe, e-mail: issues-unsubscribe at sip-communicator.dev.java.net
For additional commands, e-mail: issues-help at sip-communicator.dev.java.net

More information about the issues mailing list