> Tomas Kuliavas said:
>> In some cases this header is not security problem, but security feature.
>> If admin does not understand possible sender forging issues, removal of
>> authenticated header creates security problem in default squirrelmail
>> configuration.
>
> Yes, I understand that. I am t
Hello Fredrik,
Thursday, April 21, 2005, 2:59:53 PM, you wrote:
>> I read your reply to that poster. I'm also interested in this issue, and
>> I've searched the Development archives but have not found *the* solution.
>> I found many posts discussing the issue and how it might be handled, but
>> no
Tomas Kuliavas said:
> In some cases this header is not security problem, but security feature.
> If admin does not understand possible sender forging issues, removal of
> authenticated header creates security problem in default squirrelmail
> configuration.
Yes, I understand that. I am the admini
> From: Jonathan Angliss squirrelmail.org>
> Subject: Re: SquirrelMail authenticated user in message headers
> Newsgroups: gmane.mail.squirrelmail.user
> Date: 2005-04-20 15:33:32 GMT (1 day, 3 hours and 28 minutes ago)
>
>>> Why, oh why, does SquirrelMail have this header in it's messages:
>
>>>
>> I think it's:
>> config/conf.pl
>> 4. General Options
>> 7. Hide SM attributions: true
>>
>
> Strange, I have that same option in 1.4.4, and it's set to true (Yes),
> but this header is not hidden.
As Jonathan wrote: "there is code in the development branch". SquirrelMail
v1.4.4 is S
Fredrik Jervfors said:
> I think it's:
> config/conf.pl
> 4. General Options
> 7. Hide SM attributions: true
Strange, I have that same option in 1.4.4, and it's set to true (Yes), but
this header is not hidden.
---
SF email is spons
On 4/21/05, Fredrik Jervfors <[EMAIL PROTECTED]> wrote:
> >>> Why, oh why, does SquirrelMail have this header in it's messages:
> >>>
> >>> SquirrelMail authenticated user your_username
>
> To prevent spoofing?
>
> >> You should read the archives for the development list. This has come
> >> up a
>>> Why, oh why, does SquirrelMail have this header in it's messages:
>>>
>>> SquirrelMail authenticated user your_username
To prevent spoofing?
>> You should read the archives for the development list. This has come
>> up a couple of times, and there is code in the development branch that
>> al
From: Jonathan Angliss squirrelmail.org>
Subject: Re: SquirrelMail authenticated user in message headers
Newsgroups: gmane.mail.squirrelmail.user
Date: 2005-04-20 15:33:32 GMT (1 day, 3 hours and 28 minutes ago)
>> Why, oh why, does SquirrelMail have this header in it's messages:
>> SquirrelMail
>
>> Why, oh why, does SquirrelMail have this header in it's messages:
>
>> SquirrelMail authenticated user your_username
>
> You should read the archives for the development list. This has come up a
> couple of times, and there is code in the development branch that allows
> the administrator to
> Why, oh why, does SquirrelMail have this header in it's messages:
> SquirrelMail authenticated user your_username
You should read the archives for the development list. This has come up a
couple of times, and there is code in the development branch that allows
the administrator to hide this.
Dear All,
Why, oh why, does SquirrelMail have this header in it's messages:
SquirrelMail authenticated user your_username
It's such a security risk.
I mean you can see mine if you view "All Message Headers"
How can I disable this feature?
Thanks.
--
Kind Regards,
Gavin Henry.
Managing Dire
12 matches
Mail list logo
