[tor-bugs] #6338 [TorBirdy]: enable connection security by default

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Fri Jul 6 23:10:29 UTC 2012


#6338: enable connection security by default
----------------------+-----------------------------------------------------
 Reporter:  proper    |          Owner:  ioerror
     Type:  defect    |         Status:  new    
 Priority:  normal    |      Milestone:         
Component:  TorBirdy  |        Version:         
 Keywords:            |         Parent:         
   Points:            |   Actualpoints:         
----------------------+-----------------------------------------------------
 After adding a POP/IMAP or SMTP accounts, connection security is disabled
 by default. That's bad. Please enable STARTLS or SSL/TLS by default.

 Most mail providers support SSL these days. People really should feel
 encouraged to use it.

 At the same time, "check for new messages on startup" (#6336) and "check
 for new messages every 10 minutes" (#6337) is activated, which increases
 probability to send login data in cleartext.

 And also please prevent people from shooting their own feet, i.e. people
 who forget to look through all options and giving their passwords to exit
 nodes.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6338>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list