Username/Password security?

Hello!

I would like to try the Google Calendar Agenda, but my primary concern is the security of my Google Calendar username and password.
So my question is whether the username and password are sent to Google in cleartext or not? When I log on into the Calendar using a web browser, the login form is protected by an HTTPS connection. What about logging via the gadget?


Thank you!
Georgi

Hello Georgi,

For authenticating to Google Calendar service, the gadget uses ClientLogin, which is the one from Google API's authentication methods which is designed for installed applications. The process of ClientLogin goes over https. You can read more about ClientLogin here: http://code.google.com/apis/accounts/docs/AuthForInstalledApps.html

For checking new messages in GMail, the gadget uses GMail atom feed, which also works over https protocol. You can read more about GMail atom feed for example here http://mail.google.com/support/bin/answer.py?hl=en&answer=13465

However, you have to protect your computer against attackers, as https doesn't protect from them.

Dear Admin,

Thank you for this reassuring reply. Of course, I am already protecting all my PCs with antivirus, antispyware and firewall applications.
However, there are quite a few applications who are working over the network and are often sending sensitive information somewhere, without informing the user about all the details.

I am glad that your gadget indeed uses HTTPS. Thank you!

Georgi