910544 - Check mail works without master password (MP) prompt after security device logged out

Status: NEW

(Thunderbird :: Security, defect)

Description

[V@no]

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:23.0) Gecko/20100101 Firefox/23.0 (Beta/Release)
Build ID: 20130814063812

Steps to reproduce:

When master password is set, attempting check for new mail will ask for the master password. After it was accepted and later logged out via
Cc['@mozilla.org/security/pk11tokendb;1']
.getService(Ci.nsIPK11TokenDB)
.getInternalKeyToken()
.logoutAndDropAuthenticatedResources()




Actual results:

it will not ask for master password again during next check for new mail.


Expected results:

The account identity should not be cached and it should ask for master password again.

Comment 1

[Wayne Mery (:wsmwk)]

related to bug 534444 ?

Comment 2

[Kai Engert (:KaiE:)]

In order to implement this request, the gecko engine would have to broadcast the logout event, TB would have to listen for it, and close all open and authenticated connections to mail servers.

Comment 3

[Kai Engert (:KaiE:)]

(In reply to Wayne Mery (:wsmwk) from comment #1)

related to bug 534444 ?

no