On Mon, 2003-10-13 at 16:40, Ow Mun Heng wrote: > >>All your questions about this particular username/password combo are > >>related to Yahoo!. How it's hashed, when, etc. are all things dictated by > >>how Yahoo! wrote their web pages. Not being a user of their service, I > >>cannot comment. POP user/pass data should go by in the clear, for example. > > I'm a user of Yahoo! service and I'm just a bit nervous.. all these > "what-Ifs" > AS I mentioned, I'm not gonna check my ISP POP mail using wifi. Definately a > No-No. I would hardly do anything WIFI unless it was encrypted. And I don't mean ROT13 encrypted, I mean SSL or so. But then, I'm paranoid! > >>How it's hashed, > That's the thing. How does my PC know which algo to use to hash the > password, if it's client-side processing? I don't believe there's javascript > or something.. > Oh well.. Until I know enough, I doubt I'm gonna trust using webmail like > Yahoo. > > ANyone know how to encapsulate yahoo mail or any other webmail with SSH? You could ssh from wireless laptop to desktop machine, which would very securely encrypt everything (even plain text stuff) between then two, and then use the desktop to connect on through the internet the way you normally do. If I were you, I wouldn't be connecting to anything that wasn't https anyway, WIFI or no WIFI. HTH, -- Iain Buchanan <iain@xxxxxxxxxxxx> -- Shrike-list mailing list Shrike-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/shrike-list