> From: Jonathan Angliss <jon <at> squirrelmail.org> > Subject: Re: SquirrelMail authenticated user in message headers > Newsgroups: gmane.mail.squirrelmail.user > Date: 2005-04-20 15:33:32 GMT (1 day, 3 hours and 28 minutes ago) > >>> Why, oh why, does SquirrelMail have this header in it's messages: > >>> SquirrelMail authenticated user your_username > >> You should read the archives for the development list. This has come >> up a couple of times, and there is code in the development branch that >> allows the administrator to hide this. > > Hello Jonathan: > > I read your reply to that poster. I'm also interested in this issue, and > I've searched the Development archives but have not found *the* solution. > I found many posts discussing the issue and how it might be handled, but > not how to actually disable this. > > Could you please let us know if it's possible to disable the display of > the "SquirrelMail authenticated user" header in the stable branch, as in > 1.4.4?
http://sourceforge.net/tracker/index.php?func=detail&aid=847107&group_id=311&atid=423679 In some cases this header is not security problem, but security feature. If admin does not understand possible sender forging issues, removal of authenticated header creates security problem in default squirrelmail configuration. -- Tomas ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click -- squirrelmail-users mailing list Posting Guidelines: http://squirrelmail.org/wiki/wiki.php?MailingListPostingGuidelines List Address: [email protected] List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=2995 List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
