Tuesday, December 14, 2010

Google Notifier ssl on Mac

The default google notifier on mac does not use https. Since it's a piece of cake to sniff the passwords with Ethereal, Wireshark and Firesheep its must be made a little more difficult for these script kiddies.
Google does not use https standard, due to traffic, and server load increase. So we must switch it on ourselves. Its possible to do it in several way's.
The goal is to edit the "GmailNotifier.plist" file.
Possibility one: 
The file can be edited as root with your favorite editor. 
~/Library/Preferences/com.google.GmailNotifier.plist
Add : "Secure always", with value "1".
So it becomes:





As you can see i also changed the maximum of messages it shows by adding:
"MaxMessagesOnMainMenu" value "10"
Now save as root and restart google notifier.

Possibility two:
Google Notifier also has a build in html editor.
When you press "preferences" while pressing "alt" and "cmd" the defaults editor pops up.
You can fill in the same values, "set" and restart google notifier and you are done.