Opened 12 years ago

Closed 12 years ago

Last modified 11 years ago

#16542 closed defect (fixed)

Trac registration email sends password in email

Reported by: vpribish@… Owned by: wsiegrist@…
Priority: Normal Milestone:
Component: server/hosting Version: 1.6.0
Keywords: security Cc:
Port:

Description

When creating a new account on macports.org a registration email is sent containing my plaintext password. This is embarrassingly insecure.

I think there is a config for trac that tells it to skip sending the password.

The registration screen should at least warn the user that the password will be mailed out.

Change History (3)

comment:1 Changed 12 years ago by jmroot (Joshua Root)

Component: portsserver/hosting
Owner: changed from macports-tickets@… to wsiegrist@…

comment:2 Changed 12 years ago by wsiegrist@…

Resolution: fixed
Status: newclosed

Fixed

comment:3 Changed 11 years ago by (none)

Milestone: Website & Documentation

Milestone Website & Documentation deleted

Note: See TracTickets for help on using tickets.