[Bug 457942] Re: Password should not be transmitted in clear text

2009-10-23 Thread Gerard Dethier
I just realized that I'm wrong. If data given in attached file are transmitted using SSL, there is no problem. After looking at the source code of papyon (0.4.3), it seems to be the case as authentification is done by connecting to https://login.live.com. Sorry for the disturbance. ** Changed in:

[Bug 457942] Re: Password should not be transmitted in clear text

2009-10-22 Thread Gerard Dethier
** Description changed: Binary package hint: telepathy-butterfly + Package version: 0.5.0-0ubuntu3 + Distribution: Ubuntu 9.10 Karmic + Architecture: i386 When connecting to an MSN account, password is transmitted in clear text, which is a very bad thing... -- Password should not be tra

[Bug 457942] Re: Password should not be transmitted in clear text

2009-10-22 Thread Gerard Dethier
msnConnection.log contains a snippet of a log generated using following command : BUTTERFLY_PERSIST=1 BUTTERFLY_DEBUG=all /usr/lib/telepathy/telepathy-butterfly 2>&1 | tee butterfly.log I extracted the part where password is transmitted to the server and replaced my password by the string "[pass