[Users] [Bug 3099] when used in URI, (https://USERNAME:MYPASSWORD at mailserver/home/USERNAME/Calendar), password stored in plain text

[noreply at thewildbeast.co.uk]

http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=3099

Klaus Kusche <klaus.kusche at computerix.info> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |klaus.kusche at computerix.inf
                   |                            |o

--- Comment #29 from Klaus Kusche <klaus.kusche at computerix.info> ---
Another vote for this one.
This is my central LDAP password at our university.
It allows to modify all my student's grades,
it allows to register students as present or absent,
it allows to read and send my mail,
it allows to change my web presence,
it allows to hook up to our WLAN in my name etc.
And it allows to change my password!

Claws is the only program storing it in clear text,
there is no other clear text copy of that password on any of my disks.

-- 
You are receiving this mail because:
You are the assignee for the bug.