Version 1.1.0 out with the following changes:

* Reimplemented local mail send component - moved away from central server

To update, click on the download link in the opening post, or use Help > Check for Updates. The server mail sending functionality will be shut down Wed February 1st 2012. Could you please test this release and let me know if you  have issues using it with your mail settings?

This version should resolve any hacking/security/privacy issues mentioned in the topic.

Well it sounds like due to theoretical issues I'm having to make the app less practical. I'm a bit demoralised.

Regarding your comments, it's trivial to ban ips based on access logs, I can do that right now. There are billions of webpages on the internet, why do you think hackers will spend the time to hack my webhost just to get at mine? I doubt it will become a target just because a bit of php code contains a gmail username and password. There are bigger problems then for my hoster - who is very reliable. Also there are not many users of NoteMe, so the target is tiny.

So, the code is secure. The only weakness in the current setup is that a snooper can read out the outgoing http call and intercept the message (along with all other unencrypted network traffic) before it's being processed. A simple solution is to encrypt it before sending it. I rather work on that then add SMTP configuration, because it's in my opinion the barrier of email configuration is larger than the debated issue.

But I think now some people will have decided against using the program even though it's more likely spyware will read your outlook mail then target NoteMe. :(

Also want to say having this discussion is helpful