#16542 closed defect (fixed)
Trac registration email sends password in email
| Reported by: | vpribish@… | Owned by: | wsiegrist@… |
|---|---|---|---|
| Priority: | Normal | Milestone: | |
| Component: | server/hosting | Version: | 1.6.0 |
| Keywords: | security | Cc: | |
| Port: |
Description
When creating a new account on macports.org a registration email is sent containing my plaintext password. This is embarrassingly insecure.
I think there is a config for trac that tells it to skip sending the password.
The registration screen should at least warn the user that the password will be mailed out.
Change History (3)
comment:1 Changed 16 years ago by jmroot (Joshua Root)
| Component: | ports → server/hosting |
|---|---|
| Owner: | changed from macports-tickets@… to wsiegrist@… |
comment:2 Changed 16 years ago by wsiegrist@…
| Resolution: | → fixed |
|---|---|
| Status: | new → closed |
comment:3 Changed 16 years ago by (none)
| Milestone: | Website & Documentation |
|---|
Milestone Website & Documentation deleted
Note: See
TracTickets for help on using
tickets.
Fixed