23554 - Browser|New Message; send does not ask for passwd dialog

Status: VERIFIED INVALID

(MailNews Core :: Composition, defect, P3)

Description

[Chris McAfee]

Browser|New Message, do not bring up mail UI.
compose message & send, I don't get asked for a
passwd dialog and the message sends.

I then bring up the mail UI and finally get asked for
a passwd.

Comment 1

[esther]

Just checking...
1. Do you have the checkbox=checked for Copies and Folders for the account you
are sending from?
2. If so, are copies going to a Local Sent folder?
If #1 is not checked or #2 is going to a Local Folder, you won't get a password
dialog when sending.   If you have the box checked and sending a copy to an IMAP
folder you should get the password dialog.  This how 4.7 works.  Let me know.

Comment 2

[Chris McAfee]

I do have copies selected, and it's going to a local folder.
If this is expected behavior, fine.  Sending mail as "mcafee"
w/o entering an authenticated user space seems like a security
problem to me.

Comment 3

[Chris McAfee]

Esther, you are right!  I checked 4.7 and lo and behold
no password dialog.  Ok, marking invalid.  Please reopen
if this is a security risk, "4.7" doesn't necessarily make
it correct behavior ;-)

Comment 4

[lchiang]

In 4.x, there is the option to use SSL or TLS for outgoing messages.  (This is
in preferences under mail server.)  Basically, if you have this checked and the
mail server you are using is set up for it, you will get authenticated SMTP
where it'll ask for your password before sending the message, I believe.  And,
in the received msg, it'll show "Internal" on the message header area so the
recipient knows that the message was really sent by you.

Comment 5

[esther]

cc'ing Sol for comments on whether we're supporting TLS in 5.0

Comment 6

[lchiang]

Yes, auth smtp is being supported.  mscott or jefft have a bug on this.  Testing 
will be done when that feature/bug is working.  

Comment 7

[Pulsebot]

Pushed by ffxbld-merge:
https://hg.mozilla.org/releases/mozilla-beta/rev/759029a58644
[fenix] For https://github.com/mozilla-mobile/fenix/issues/23554 - Remove Top Sites border