939594 - When promoted to enter the password for the email, I was able to just exit out of the password box and access emails, therefore someone would not need my password to get to my email account on Thunderbird.

Status: RESOLVED DUPLICATE of bug 16489

(Thunderbird :: Security, defect)

Description

[Nicholas Baugh]

Attachment: 4 Photos.rar

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.57 Safari/537.36

Steps to reproduce:

I open up Thunderbird and just clicked the close button when it promoted me to enter the email password, allowing me to see the emails after. (But you cannot send emails.)


Actual results:

I could then read emails without my email password.


Expected results:

It shouldn't have let me look at the emails without the password.

Comment 1

[:aceman]

(In reply to Nicholas Baugh from comment #0)
> Expected results:
> 
> It shouldn't have let me look at the emails without the password.

The password is only needed for sending and receiving NEW messages.

If you want protection of your data, either use protection from your operating system (username and password when logging into OS), or filesystem encryption or similar technique. If neither of those fits your use case, then you probably wanted bug 16489.