278858 - Copying profile folder allows reading of e-mail

Status: RESOLVED INVALID

(Thunderbird :: General, defect)

Description

[John Russell]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0

By coping the files in the profile folder from c:\Documents and
Settings\{USERNAME}\Application Data\Thunderbird\Profiles\{Thunderbird Generated
folder name} from one installation of Thunderbird to another, I can not only
read e-mails which have been downloaded in the past, but I can download new
messages without being challenged to reenter the password.

Reproducible: Always

Steps to Reproduce:
1. Copy profile files from currently working copy of Thunderbird
2. Install Thunderbird on new machine.
3.  Once Thunderbird is installed, start the program and then exit without
making any configurations. 
4.  Find the new profile folder that Thunderbird has created, then copy all
files from your old profile folder over to this one.
5.  Load Thunderbird.  Nothing else is required.  You will be able to read and
retrieve all messages from any mail account that was set up in the prior
installation.

Actual Results:  
I was able to read and retrieve messages from the accounts I had set up in my
previous installation.

Expected Results:  
Just allow previous messages to be downloaded, but challenge the user for the
password before retrieving new messages.

Comment 1

[Matthias Versen [:Matti]]

-> invalid

Don't store the passwords in the password manager OR encrypt the passworsds with
a masterpassword.