[Yanel-dev] [Bug 7581] New: sending E-mails using a remote SMTP
server
bugzilla at wyona.com
bugzilla at wyona.com
Wed Apr 28 09:45:41 CEST 2010
http://bugzilla.wyona.com/cgi-bin/bugzilla/show_bug.cgi?id=7581
Summary: sending E-mails using a remote SMTP server
Product: Yanel
Version: unspecified
Platform: All
OS/Version: All
Status: NEW
Severity: enhancement
Priority: P2
Component: Security
AssignedTo: michael.wechner at wyona.org
ReportedBy: guillaume.deflache at wyona.com
QAContact: yanel-development at wyona.com
In <http://lists.wyona.org/cgi-bin/mailman/private/dev/2010-April/001495.html>
I provided an *unsecure* patch to send E-mails using login/password using a
remote SMTP server without using SSL or TLS, so AFAIK sending easy to sniff
login and password!
I am about to add the patch there anyway, IMHO the minimal improvements needed
for inclusion into Yanel are:
- the parametrization has to be improved so that the login and password are
read from a separate file with minimal read permissions
- we should (at least try to) use encryption
--
Configure bugmail: http://bugzilla.wyona.com/cgi-bin/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.
More information about the Yanel-development
mailing list