PSM not encrypting data

VERIFIED WORKSFORME

Status

Core Graveyard
Security: UI
P3
normal
VERIFIED WORKSFORME
18 years ago
2 years ago

People

(Reporter: Eric Vaandering (no email), Assigned: David P. Drinan)

Tracking

1.0 Branch
x86
Linux

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

18 years ago
While trying to track down the circumstances of my bug 61074, I deleted some
files related to chromes on my installation.

Now, I am not prompted for a PSM password, but PSM can still provide my IMAP
password and passwords to web sites.

I've ALWAYS used the "encrypt" sensitive data option, so this data should never
be available without knowing the password. I consider this a serious security
problem.
(Reporter)

Comment 1

18 years ago
After a quit and a restart, I no longer see this behavior. Is it possible that I
had an instance of PSM around from a pervious mozilla session that crashed and
that that PSM was supplying password information to the new mozilla session?

Comment 2

18 years ago
Yes definitely. There is a bug filed about PSM not stopping (after a crash or
even simply when quitting Mozilla), you can query for it yourself or if you
really don't find it email me and I'll find it for you.
Marking this worksforme per reporter's comments. Please reopen if you think it
is necessary.
Thank you for the update, keep the reports coming :)
Fabian.
Status: UNCONFIRMED → RESOLVED
Last Resolved: 18 years ago
Resolution: --- → WORKSFORME

Comment 3

18 years ago
Verified worksforme.
Status: RESOLVED → VERIFIED

Updated

14 years ago
Component: Security: UI → Security: UI
Product: PSM → Core

Updated

10 years ago
Version: psm1.3 → 1.0 Branch
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.