Apple's MobileMe lacks key security feature

August 20, 2008 (IDG News Service) Users of Apple's MobileMe have already discovered that the US$99-per-year service is sometimes slow and unreliable, and they're now talking about another shortcoming that was intentional. MobileMe allows users to synchronize e-mail, calendar and contact information among various devices over the Internet. Although the log-in process for MobileMe is encrypted, Apple does not encrypt data that users send from browsers through MobileMe. The lack of SSL (Secure Sockets Layer) or any other form of encryption means that if a MobileMe user is connected to the Internet via a Wi-Fi hotspot, someone else connected to the same hotspot could relatively easily see all the data that the MobileMe user sends. "Seems like a pretty major omission for a service that's specifically aimed at roaming users,"... [read full story]