266390 - it is not possible to protect the passwords with a masterpassword. The passwords could be read in clear text.

Status: RESOLVED INVALID

(SeaMonkey :: Passwords & Permissions, defect)

Description

[peter vogt]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; de-AT; rv:1.7.3) Gecko/20040910
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; de-AT; rv:1.7.3) Gecko/20040910

password are shown in clear text

Reproducible: Always
Steps to Reproduce:
1.reset masterpassword
2.set new password
3.read passwords



Expected Results:  
asking for the masterpassword,
better never show a password in clear text

Comment 1

[Daniel Veditz [:dveditz] (OOO: back Aug 26)]

If you had encrypted passwords and truly *reset* your master password you would
not have any passwords left to read in step 3 since resetting that--as opposed
to merely changing the password--is a destructive act. Either:

1) Your passwords are stored "obscured" rather than encrypted (the default) and
this is the correct behavior. Check the "Use encryption when storing sensitive
data" box on the password preference pane.

or

2) You've left out a whole lot of detail necessary to make this a valid bug. If
that's the case please reopen the bug with enough details to allow us to
reproduce this case.