Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

email plugin: safe password storage

#10

Passwords are at the moment stored in plain text. It would be better to store a SHA1 hash of the password, or something similar.

Reported by Martin Häger · August 29th, 2008 @ 12:09 PM

State: hold
Milestone: none
Assigned to: Martin Häger Martin Häger

Activity

  1. Martin Häger
    Martin Häger
    • State changed from new to open

    August 30th, 2008 @ 11:20 AM

  2. Martin Häger
    Martin Häger
    • State changed from open to hold

    Using hashed passwords isn't feasible, since the plugin needs to know the password in order to connect to the mail server.

    Possible options

    • Don't store password at all, force password entry when plugin is restarted (preferred)
    • Use a two-way encryption method

    Alternatively, use a combination of the two (i.e. store encrypted passwords in memory, decrypt them when needed)

    Needs further investigation (ticket on hold).

    August 30th, 2008 @ 01:15 PM

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.