if no internet connection available, password dialog does not appear

VERIFIED DUPLICATE of bug 318697

Status

Thunderbird
Security
--
major
VERIFIED DUPLICATE of bug 318697
7 years ago
7 years ago

People

(Reporter: aran, Unassigned)

Tracking

x86
Windows XP

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

7 years ago
User-Agent:       Mozilla/5.0 (Windows NT 5.1; rv:2.0.1) Gecko/20100101 Firefox/4.0.1
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.15) Gecko/20110414 Lightning/1.0b2 Thunderbird/3.1.10

I have set a password manager, to login to thunderbird.
If I have internet connection, I launch thunderbird, it asks for password, i can login.

if I dont have internet connection, i launch thunderbird, it does not ask for password.

Reproducible: Always


Actual Results:  
not asking for password to login, if no internet connection available

Expected Results:  
need to ask for password to login, independent of internet connection
(Reporter)

Updated

7 years ago
Version: unspecified → 3.1
(In reply to comment #0)
> Expected Results:  
> need to ask for password to login, independent of internet connection

Why should Thunderbird ask for a password if it isn't going to log in? You could be doing a whole Thunderbird session whilst offline, and hence you'd never need to enter the password.
Group: core-security
(Reporter)

Comment 2

7 years ago
In my opinion, master password is to protect the content of the thunderbird and also connect to different mail accounts and get the mails.

If I leave the computer and go to the rest room, somebody can remove the lan cable and launch thunderbird and read all my emails. 
 
Is it not the purpose of master password to protect?
You didn't say master password initially.

As detailed in the preferences dialog, the master password only protects access to your passwords, it is not designed to protect access to your emails.

(In reply to comment #2)
> If I leave the computer and go to the rest room, somebody can remove the lan
> cable and launch thunderbird and read all my emails. 

They would be able to read your downloaded emails without launching Thunderbird as they are accessible on the disk.

You should use OS level protection to prevent access to your computer in the first place.
Status: UNCONFIRMED → RESOLVED
Last Resolved: 7 years ago
Resolution: --- → DUPLICATE
Duplicate of bug: 318697
(Reporter)

Comment 4

7 years ago
I understood, that master password protects the mails and account passwords.
Now, learned that, it does only protect account passwords.

I would not just depend on OS, as you know the windows loopholes.
It would be great, if more security can be applied in this regards
Status: RESOLVED → UNCONFIRMED
Resolution: DUPLICATE → ---
Sorry, but we're not currently planning on implementing any more security within Thunderbird, especially when there are various tools on the market that already help improve the security of computers.

Please don't unmark this as duplicate. Bug 318697 is the one that is central to these requests.
Status: UNCONFIRMED → RESOLVED
Last Resolved: 7 years ago7 years ago
Resolution: --- → DUPLICATE
Duplicate of bug: 318697
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.