On 7/28/05, Rafael Martinez <[EMAIL PROTECTED]> wrote: > > The only explanation I can find to our problem is that the same happens > when using SM via a 'proxy' or that 'this' proxy in particular is not > working as it should. > > Anyone with the same problem or ideas to fix this serious security > problem we have.
It sounds like the proxy is caching pages when it probably shouldn't be. A simple fix would be to run squirrelmail under https/SSL, then it will be encrypted from end to end. Another option would be to configure the web server to set HTTP headers appropriately to tell any cache's to avoid caching any pages on your Squirrelmail setup. -Dave ------------------------------------------------------- SF.Net email is Sponsored by the Better Software Conference & EXPO September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf -- squirrelmail-users mailing list Posting Guidelines: http://squirrelmail.org/wiki/wiki.php?MailingListPostingGuidelines List Address: [email protected] List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id)95 List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
