Closed Bug 1011956 Opened 10 years ago Closed 10 years ago

thunderbird Master Password repeating pushed cancel let people read mail

Categories

(Thunderbird :: Security, defect)

Product:
Thunderbird
Component:
Security
Version:
24 Branch
Platform:
x86_64
Windows 8.1
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED DUPLICATE of bug 16489

People

(Reporter: thunderbird, Unassigned)

Details

User Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0 (Beta/Release)
Build ID: 20140506152807

Steps to reproduce:

Thunderbird 24.5.0. With Master Password set. Master Password popup is on screen. Several times pushing cancel and not type in the password.


Actual results:

I can open/read existing emails. F.i. get new mail prompts for Master PW again. Again several cancels and I can read allready retreived mail, even mail out of different  mailboxes.


Expected results:

cancelling the master password, can mean 2 things, closing the program. Not allowed to read mail.
OR
Deny any email opening, without the master password entered.
Status: UNCONFIRMED → RESOLVED
Closed: 10 years ago
Resolution: --- → DUPLICATE
also bug 318697.

master password is *not* designed to protect profile contents.
it is designed to protect the saved passwords only.
You need to log in before you can comment on or make changes to this bug.