downloading emails on phone on public wifi. Safe?

AndyPix

were wrote: »

Think it was a man in the middle?.

Yeah possibly . A rogue AP (or "evil twin" as they are known )


The user would stiull have had to knowingly click "yes" to install the app though. But could easily be tricked into doing this ..

silvercar

OH has now found trojans on his work computer....that he has used to log in to the credit card website. :mad:

So that explains a lot. No doubt he would have used the password that I use for emails for other review sites we both use, even though we were careful to use a different password for the credit card account.

AndyPix

yep ......

Frozen_up_north

Are you using lousy email settings? Like POP3 and SMTP? Providers like Karoo (Kingston Comms in Hull) use plain language email, including the log-on, which offers no security at all. I'm sure Karoo aren't the only email providers who are clueless about security.

Free WiFi is a known security issue, which is why many of us use a VPN to keep hotel/bar/shopping centre WiFi connections secure.

unforeseen

Frozen_up_north wrote: »

Are you using lousy email settings? Like POP3 and SMTP? Providers like Karoo (Kingston Comms in Hull) use plain language email, including the log-on, which offers no security at all. I'm sure Karoo aren't the only email providers who are clueless about security.

Free WiFi is a known security issue, which is why many of us use a VPN to keep hotel/bar/shopping centre WiFi connections secure.

I think you may be jaded by Karoo's poor service.

POP and SMTP use encryption as standard these days. A quick scout around tends to point to Karoo being in a very small minority (the only one I found) that don't bother with encryption

You consider SMTP to be 'lousy'. How do you send emails? Even using IMAP outgoing email is sent via SMTP

Whether you use POP or IMAP, the incoming the servers are normally set up the same for both when it comes to SSL/TLS. Which you use depends on how you want to use it. Each have their merits as each have their downside.

AndyPix

I think he/she means that they dont use ssl for the web interface.


So everything is sent in plain text


Incredibly enough, Yahoo and many others didnt do this either until quite recently

unforeseen

AndyPix wrote: »

I think he/she means that they dont use ssl for the web interface.


So everything is sent in plain text


Incredibly enough, Yahoo and many others didnt do this either until quite recently

I thought email client due to the mention of POP & SMTP, protocols that are immaterial when using webmail.

AndyPix

Yeah but as we both know, this statement "Are you using lousy email settings? Like POP3 and SMTP?"


Doesnt really mean anything (no disrespect to poster)..


So i kind of extrappolated out


BUT .. Looking at the interface now (logon page at least) , it does offer SSL currently, so i may be confused