[Fwd: Bugmail is less secure than Bug views]

Max Kanat-Alexander mkanat at bugzilla.org
Mon Jun 11 21:53:08 UTC 2007


	Anybody who has an SSL cert and advertises TLS support on their
mail server receives mail with SSL. They can also make their POP or IMAP
connections with SSL.

	The mail is clear in their inbox, true, but I don't think this
is a real security concern.

	-Max

On Mon, 11 Jun 2007 17:18:59 +0100 Gervase Markham <gerv at mozilla.org>
wrote:
> This is an email forwarded with permission from the Mozilla security 
> group mailing list, on the subject of the fact that Bugzilla access
> is now SSL-protected, but bugmail is still transmitted in the clear.

-- 
http://www.everythingsolved.com/
Competent, Friendly Bugzilla Services. And Everything Else, too.



More information about the developers mailing list