Closed Bug 62474 Opened 24 years ago Closed 24 years ago

PSM not encrypting data

Categories

(Core Graveyard :: Security: UI, defect, P3)

1.0 Branch
x86
Linux
defect

Tracking

(Not tracked)

VERIFIED WORKSFORME

People

(Reporter: ewv, Assigned: ddrinan0264)

Details

While trying to track down the circumstances of my bug 61074, I deleted some
files related to chromes on my installation.

Now, I am not prompted for a PSM password, but PSM can still provide my IMAP
password and passwords to web sites.

I've ALWAYS used the "encrypt" sensitive data option, so this data should never
be available without knowing the password. I consider this a serious security
problem.
After a quit and a restart, I no longer see this behavior. Is it possible that I
had an instance of PSM around from a pervious mozilla session that crashed and
that that PSM was supplying password information to the new mozilla session?
Yes definitely. There is a bug filed about PSM not stopping (after a crash or
even simply when quitting Mozilla), you can query for it yourself or if you
really don't find it email me and I'll find it for you.
Marking this worksforme per reporter's comments. Please reopen if you think it
is necessary.
Thank you for the update, keep the reports coming :)
Fabian.
Status: UNCONFIRMED → RESOLVED
Closed: 24 years ago
Resolution: --- → WORKSFORME
Verified worksforme.
Status: RESOLVED → VERIFIED
Product: PSM → Core
Version: psm1.3 → 1.0 Branch
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.