http://qa.mandrakesoft.com/show_bug.cgi?id=4912


[EMAIL PROTECTED] changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED




------- Additional Comments From [EMAIL PROTECTED]  2003-03-09 10:55 -------
Fixed in gnome-control-center 2.3.6-1mdk

-- 
Configure bugmail: http://qa.mandrakesoft.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.


------- Reminder: -------
assigned_to: [EMAIL PROTECTED]
status: RESOLVED
creation_date: 
description: 
Run gnome-network-preferences, hit the details button, and you will get a dialog
with "use authentication" checkbox, which enables the "username" and "password"
text fields. Check the checkbox, enter a password, and you will see it is in the
clear.

This is a serious security issue, passwords should never be displayed in the
clear (in my case, we use single sign-on, my proxy password is my LDAP account
password, which has higher priveleges than most users).

[also, there are no proxy exclusion settings, which is why I avoid using GNOME
applications for internet access as even local traffic goes through our
expensive upstream proxy]

Reply via email to