Opened 16 years ago

Closed 16 years ago

Last modified 15 years ago

#16542 closed defect (fixed)

Trac registration email sends password in email

Reported by: vpribish@… Owned by: wsiegrist@…
Priority: Normal Milestone:
Component: server/hosting Version: 1.6.0
Keywords: security Cc:
Port:

Description

When creating a new account on macports.org a registration email is sent containing my plaintext password. This is embarrassingly insecure.

I think there is a config for trac that tells it to skip sending the password.

The registration screen should at least warn the user that the password will be mailed out.

Change History (3)

comment:1 Changed 16 years ago by jmroot (Joshua Root)

Component: portsserver/hosting
Owner: changed from macports-tickets@… to wsiegrist@…

comment:2 Changed 16 years ago by wsiegrist@…

Resolution: fixed
Status: newclosed

Fixed

comment:3 Changed 15 years ago by (none)

Milestone: Website & Documentation

Milestone Website & Documentation deleted

Note: See TracTickets for help on using tickets.