via macosxhints.com: Gmail Notifier for Mac OS X sends your passwords in the clear over the network by default.

The link provides instructions on how to access a hidden setting that enables authentication over HTTPS. No idea why this isn't enabled by default - or why this setting isn't more clearly visible.

edit: According to some comments on ( Read more... )