T-Online doesn't require password to access emails

RESOLVED INVALID

Status

Thunderbird
Security
RESOLVED INVALID
13 years ago
9 years ago

People

(Reporter: Hartmut Neubauer, Assigned: dveditz)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

13 years ago
User-Agent:       Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Build Identifier: http://download.mozilla.org/?product=thunderbird-1.0.7&os=win&lang=de-DE

I am a customer of T-Online (pop3 server pop3.t-online.de, smtp server mailto.t-online.de). When Thunderbird asks me to enter the personal password for the pop3 server, I can enter a wrong password (for instance, "abc" or "xyz"), and I receive my e-mails anyway.
I don't know whether this happens with other providers, too.
T-Online allows different passwords for general and e-mail access. I have chosen the same.

Reproducible: Always

Steps to Reproduce:
1. Create an account using T-Online
2. Write an e-mail to yourself.
3. Re-start Thunderbird. Click on "Abrufen". You are asked for the password. Type in a wrong one.

Actual Results:  
Thunderbird shows the new mail(s) or displays "Keine Nachrichten auf dem Server". 

Expected Results:  
Thunderbird should prevent the user to access the mails.
T-Online doesn't check at all for your password. You're authenticated by your IP address or similar while you are dialed in into T-Online.
So this is the expected behaviour.
(Reporter)

Comment 2

13 years ago
(In reply to comment #1)
> T-Online doesn't check at all for your password. You're authenticated by your
> IP address or similar while you are dialed in into T-Online.
> So this is the expected behaviour.

If this is the fact, you may change the state of the bug as <invalid>.

Comment 3

13 years ago
per mozilla@rosenauer.org
Status: UNCONFIRMED → RESOLVED
Last Resolved: 13 years ago
Resolution: --- → INVALID
(Assignee)

Updated

13 years ago
Group: security
Summary: Although I enter a wrong POP3 password in order to get mails, I can receive my e-mails anyway. → T-Online doesn't require password to access emails
You need to log in before you can comment on or make changes to this bug.