Mail login: still able to login with incorrect password

VERIFIED INVALID

Status

MailNews Core
Database
--
major
VERIFIED INVALID
17 years ago
10 years ago

People

(Reporter: marina, Assigned: Bienvenu)

Tracking

Trunk
x86
Windows 2000

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

17 years ago
**** observed with 2001-09-06-03 build ****
I am able to login into my account when one letter of the password that i am
prompted to enter is incorrect. Login would fail if i mistype two of them.
Steps to reproduce:
- open mail/news;
- in the password dlgbox mistype one letter at the end of your password;
- click Ok to submit;
//note: you are getting mail, you are in!
expected result : login fails
(Assignee)

Comment 1

17 years ago
Marina, the password is verified on the server, not the client. Only the first 8
characters are signficant on some servers. for historical reasons. Marking
invalid, Please open a bug on the server if your password is less than 8
characters long.
Status: NEW → RESOLVED
Last Resolved: 17 years ago
Resolution: --- → INVALID
(Reporter)

Comment 2

17 years ago
hmm... i'll limit it now to 8 chars...still sounds weird.

Comment 3

17 years ago
verified, although some thought could be given to providing a hint in such cases?
Status: RESOLVED → VERIFIED
(Assignee)

Comment 4

17 years ago
we can't tell if a server has a limitation or not (without actually trying to
shorten the password and testing it, and we're not going there!)
Product: MailNews → Core
Product: Core → MailNews Core
You need to log in before you can comment on or make changes to this bug.