[Tickets #3696] Add authentication for remote calendars

bugs@bugs.horde.org bugs at bugs.horde.org
Tue Mar 28 14:08:16 PST 2006


DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/?id=3696
-----------------------------------------------------------------------
 Ticket             | 3696
 Updated By         | Jan Schneider <jan at horde.org>
 Summary            | Add authentication for remote calendars
 Queue              | Kronolith
 Version            | HEAD
-State              | Assigned
+State              | Feedback
 Priority           | 1. Low
 Type               | Enhancement
-Owners             | Horde Developers
+Owners             | 
-----------------------------------------------------------------------


Jan Schneider <jan at horde.org> (2006-03-28 14:08) wrote:

Ah, not quite. This patch doesn't give any more security than storing the
credentials in cleartext. You use a known key (the url, stored in clear text
in the preferences) to encrypt the credentials. Anybody who has access to
the preferences, the people your are trying to protect the credentials
against, can easily decrypt them, because they have the key. It's a bit more
work, but still easy.




More information about the bugs mailing list