[Kolab-devel] http without s access to issues.kolab.org (bugzilla)

[Bernhard Reiter]

Am Friday, 2. December 2011 16:34:52 schrieb Jeroen van Meeuwen (Kolab 
Systems):
> > I personally would use https whenever I log in.
> > Maybe I even use a different account, because a public facing perl
> > system like bugzilla will not have the security level like a
> > production email account
> > on the administration side.
>
> Surely, you must be joking.
>
> I've pointed to three out of many examples where plain-text is allowed
> by default, for Kolab Groupware production email accounts -a groupware
> solution I believe you use as well- and you tell me a Bugzilla
> installation, while enforcing HTTPS, is a security concern to you?

Yes. No joke.
Different needs of security.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.kolab.org/pipermail/devel/attachments/20111202/022febb2/attachment.sig>