MobileMe secure?

GraemeUK · 9 Aug 2009 at 23:52

Hi guys,

Just bought mobileme and noticed everything except the Settings web apps are unencrypted? Surely this can't be right?

All my iDisk transfers will be sent/received in the clear? Contacts? Mail etc? I know email is send insecurely anyway but everytime I log in to my email it can potentially be intercepted?

I have previously used Gmail and DropBox which were all encrypted and free.

Am I missing something here please?

Spyhop · 9 Aug 2009 at 23:59

Do you mean their browser based apps are using standard http?

Capture a session with this and have a look

GraemeUK · 10 Aug 2009 at 00:05

Hi Wush, Yeah the web apps are in HTTP not HTTPS. I don't know how to use that app but thanks for the help anyway.

Fillado · 10 Aug 2009 at 00:32

From what i've read on the internet (take from it what you will):

The web apps aren't encrypted, but your data is. The code for the apps is general for every user so there's no reason to encrypt it. But these apps can then pull your data securely. Apparently.

From actual testing:

Your iDisk isn't encrypted. The username/password is sent encrypted but the data you send/receive is out there for anyone to intercept.

GraemeUK · 10 Aug 2009 at 18:12

Cheers for the replies. I spoke to Apple today and cancelled and got a full refund. Its totally unacceptable that this is not as a secure service as it could/should be.

Gmail and DropBox offer better security and for free. Granted not as much space as MobileMe but I will get by.