Mail Notification, A mail notification for freedesktop.org-compliant system trays - Bugs: bug #18893, Can passwords not be store in...
You are not allowed to post comments on this tracker with your current authentication level.
bug #18893: Can passwords not be store in plaintext in mailbox.xml
Submitter: | None | ||
Submitted: | Sat 27 Jan 2007 11:52:10 PM UTC | ||
Severity: | 1 - Wish | Status: | Wont Fix |
Privacy: | Public | Assigned to: | None |
Originator Name: | Originator Email: | -email is unavailable- | |
Open/Closed: | Closed |
Jump to the original submission
Mon 05 Mar 2007 01:16:49 AM UTC, comment #6: |
Ben Liblit <liblit> |
Mon 05 Mar 2007 12:49:12 AM UTC, comment #5: Your arguments are rather subjective. I believe that most people value the confidentiality of their personal data as much as that of their passwords. Given that assumption, for a majority of people, encrypting passwords is between useless and insufficient.
|
Jean-Yves Lefort <jylefort> |
Sun 04 Mar 2007 11:00:06 PM UTC, comment #4: Several of my mail passwords are really account passwords, in the sense that they control access to more than just a single mailbox. These passwords govern access to outside resources, such as other computers, services, and file systems. That makes them significantly more sensitive than any other piece of data in my local file system.
|
Ben Liblit <liblit> |
Sun 04 Mar 2007 10:41:34 PM UTC, comment #3: Why do you think that encrypting stored passwords is useful (that is, compared to encrypting your entire home directory)?
|
Jean-Yves Lefort <jylefort> |
Sun 04 Mar 2007 09:40:13 PM UTC, comment #2: GNOME Keyring would be ideal for this. In fact, GNOME Keyring is already used to remember passwords for any Gmail mailboxes configured in Mail Notification. I was surprised to find that other mailbox types don't use this service. Why Gmail and not POP, IMAP, etc.?
|
Ben Liblit <liblit> |
Sun 28 Jan 2007 12:02:16 AM UTC, comment #1: Why? |
Jean-Yves Lefort <jylefort> |
Sat 27 Jan 2007 11:52:10 PM UTC, original submission:
I'm using mail-notification v2.0 from the ubuntu dapper repositories. I noticed the passwords are stored in plaintext in ~/.gnome2/mail-notification/mailboxes.xml
|
Anonymous |
No files currently attached
Depends on the following items: None found
Items that depend on this one: None found
Follow 3 latest changes.
Date | Changed by | Updated Field | Previous Value | => | Replaced by |
---|---|---|---|---|---|
2007-03-05 | jylefort | Status | Need Info | Wont Fix | |
Open/Closed | Open | Closed | |||
2007-01-28 | jylefort | Status | None | Need Info |
Powered by Savane 3.13-d3ae.
Corresponding source code
I regret that you (and also the Gaim developers) feel such distain for imperfect/incomplete/selective security that you prefer to punish your users by giving them no security at all. In my less-than-perfect world, I am very glad that the developers of Mozilla/Firefox/Thunderbird see things differently.
But reasonable people can disagree, as do you and I. Arguments on both sides are subjective (me: "If I had to choose", you: "I believe", etc.). It is unfortunate that we were unable to come to agreement.
Case closed.