forwarded 394416 https://bugzilla.mozilla.org/show_bug.cgi?id=357473
thanks

* Robert Millan ([EMAIL PROTECTED]) wrote:
> Package: firefox
> Version: 1.5.dfsg+1.5.0.7-1
> Severity: wishlist
> 
> Please remove password obfuscation from signons.txt.  It is annoying and
> useless.
> 
> Rationale copied from http://gaim.sourceforge.net/plaintextpasswords.php
> 
>   "Obscure a password. This means we do something to store the password in 
> some
>   format other than plain text, but we automatically convert it for you. This 
> is
>   security by obscurity, and is a Very Bad Thing??? in that it gives users a
>   false sense of security. A false sense that we (Gaim developers) believe 
> would
>   be worse to have than to let informed users deal with the password issue
>   themselves. Consider that a naive user might think that it is safe to share
>   his or her accounts.xml, because the passwords are "encrypted"."
> 
> Upstream BTS:  https://bugzilla.mozilla.org/show_bug.cgi?id=357473

Thanks for the report. 

-- 
Eric Dorland <[EMAIL PROTECTED]>
ICQ: #61138586, Jabber: [EMAIL PROTECTED]
1024D/16D970C6 097C 4861 9934 27A0 8E1C  2B0A 61E9 8ECF 16D9 70C6

Attachment: signature.asc
Description: Digital signature

Reply via email to