bugMail Notification, A mail notification for freedesktop.org-compliant system trays - Bugs: bug #20712, auto fall back without warning...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #20712: auto fall back without warning from TLS to plain connections

Submitted by:  None
Submitted on:  Tue 07 Aug 2007 02:49:51 PM UTC  
 
Severity: 6 - SecurityStatus: Need Info
Privacy: PublicAssigned to: None
Originator Name: bobOriginator Email: -unavailable-
Open/Closed: Closed

Sun 25 Nov 2007 07:33:46 PM UTC, comment #2:

Feedback timeout. If this problem is still present, please report it in the new bug tracker (https://bugs.launchpad.net/mail-notification/).

Jean-Yves Lefort <jylefort>
Project Administrator
Tue 07 Aug 2007 04:26:13 PM UTC, comment #1:

I believe this bug was fixed in 4.1. Are you running 4.1?

Jean-Yves Lefort <jylefort>
Project Administrator
Tue 07 Aug 2007 02:49:51 PM UTC, original submission:

many mail servers support plain/TLS connections but no SSL (as it runs on another port)

this is fine, but mail notification falls back to plain when TLS communication is refused, even thus you explicitely set it to accept only TLS. the password is then sent unhashed if the TLS server negociated plain passwords only.

the problem arise if someone is in the middle (e.g. cain&abel does this), you believe that you check your emails over TLS while it will silently redirect you to the cain&abel password sniffer and you won't get any warning.

thunderbird handles this fine, by the way

Anonymous

 

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by jylefort (Posted a comment)
  •  

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 2 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Sun 25 Nov 2007 07:33:46 PM UTCjylefortOpen/ClosedOpen=>Closed
    Tue 07 Aug 2007 04:26:13 PM UTCjylefortStatusNone=>Need Info

    Back to the top


    Powered by Savane 3.1-cleanup1