[Evolution-hackers] STARTTLS broken, password sent in the clear
- From: Anders Kaseorg <anders kaseorg com>
- To: evolution-hackers gnome org
- Subject: [Evolution-hackers] STARTTLS broken, password sent in the clear
- Date: Tue, 9 May 2006 21:41:06 +0000 (UTC)
Can someone please look at <http://bugzilla.gnome.org/show_bug.cgi?id=339903>?
When you tell Evolution to use TLS encryption on an IMAP4rev1 server, it sends a
STARTTLS, then proceeds to ignore the server's response and sends out your
password in plain text anyway. Obviously, this doesn't work at all, and is a
security problem.
Anders
[
Date Prev][
Date Next] [
Thread Prev][
Thread Next]
[
Thread Index]
[
Date Index]
[
Author Index]
