Yandex App password, forcing me to click a button to download emails
Categories
(Thunderbird :: Security, defect)
Tracking
(Not tracked)
People
(Reporter: wolfgang7833, Unassigned)
Details
(Whiteboard: [support])
User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36
Steps to reproduce:
Yandex company no longer works in tb & they forced me to use an "app password",
so because i don't want to save passwords in my hard drive, i add it each time
thunderbird opens. My notification system is set to check emails every 1 minute.
Actual results:
A sound "notify" keeps playing whenever email (s) is available on the yandex
server. (bug) but the email (s) aren't downloaded at all, which creates that non stop loop of sound notification. & this only happens for the app password method.. at least, on yandex for now .. .
To download the email (s), when i hear that buggy loop, i'm compelled
"even to wake up during the night", to click on "Get Messages" button .. .
Expected results:
I shouldn't have needed to click on "Get Messages" to download email (s)
using an App password with Yandex.com, because during auto verifications,
i'm only warned non stop & nothing downloads until i click on it .. .
Tb v115.9.0 x64, on win8 x64.
| Comment hidden (duplicate) |
Updated•2 years ago
|
Updated•1 year ago
|
Comment 3•1 year ago
|
||
I have no experience here.
Have you asked in https://support.mozilla.org/en-US/questions/thunderbird ?
| Comment hidden (admin-reviewed) |
Comment 5•1 year ago
|
||
Alex, have you encountered any issues like this?
(In reply to Paul from comment #0)
(In reply to Wayne Mery (:wsmwk) from comment #5)
Alex, have you encountered any issues like this?
Yandex App password is a security features designed to protect users from unauthorized access to their accounts. It allows users to create a unique password that can only be used once per login attempt for each application. The author of this topic states that they do not want to store passwords on their hard drive. However, this is not how the Yandex App password system works. Each time a user attempts to log in, the system checks the validity of the App password. If the password has been used previously, it will be considered invalid. Therefore, it is necessary for users It is necessary to save the password in TB. You need to do this in the password manager for both Incoming mail and SMTP.
| Comment hidden (admin-reviewed) |
(In reply to Paul from comment #7)
the tweak is amazing & avoids u sweat...... .
& naturally, a saved password cannot be retrieved.
app password or not, its still a bug, cuz noone should be forced to save passwords. go play alex, if u dont wanna contribute.
This can't be a bug, because that's how the Yandex App password platform works and Thunderbird has absolutely nothing to do with it and can't do anything.
Password that can only be used once per login attempt for each application.
Attackers will not be able to use your saved password to use it to log in, because it will be linked to only your application forever if you save the password.
| Reporter | ||
Comment 10•1 year ago
|
||
applications can be transfered & copied, learn.
Comment 11•1 year ago
|
||
Paul, please take a close look at https://bugzilla.mozilla.org/page.cgi?id=etiquette.html
| Comment hidden (admin-reviewed) |
| Reporter | ||
Comment 13•1 year ago
|
||
This whole thread can be deleted.
the issue's resolved..
https://support.mozilla.org/en-US/questions/1462675#answer-1673538
it was the stupid 'Automatically download new messages' unchecked,
i don't know how that happened cause each time i add an account,
i don't remember having to select that "option".
Description
•