[horde] Remote Mail Account in Horde / Password

[Michael J Rubinsky]

Quoting Andreas Mauser <andreas at mauser.info>:

> ----- Nachricht von Erling Preben Hansen <erling at eph.dk> ---------
>      Datum: Fri, 12 Jun 2015 21:36:11 +0000
>        Von: Erling Preben Hansen <erling at eph.dk>
> Antwort an: erling at eph.dk
>    Betreff: Re: [horde] Remote Mail Account in Horde / Password
>         An: horde at lists.horde.org
>
>
>> Citat af Andreas Mauser <andreas at mauser.info>:
>>
>>> Hi,
>>>
>>> I want to add a GMX Account in Horde. It works, but every time I log into
>>> Horde I also have to put in password for my GMX Account.
>>>
>>> How to make it so that the GMX password is remembered?
>>>
>>> Thank you,Andreas
>>
>> Hey Andreas
>>
>> This has been discussed before..
>> It is not possible.
>> And in my opinion is a serious security risk.
>> Since you as an admin will be responsible of storing and securing passwords
>> of third party services.
>> When this is a sensible personal service, as a mail account is.
>> I wouldn't recommend it.
>
> I would recommend it, because the user must first authenticate via  
> Horde Authentication, in any way.
> So if I collect 3 external mail accounts, I need to log on 4 times.
> If the password could be stored e.g. in the database only the well  
> trusted administrator would have access to it. But I hope they are  
> all Snowdens...


...and of course if that one account is compromised, this compromises  
ALL your accounts. Kind of defeats the recommended security practice  
of using different passwords for each account.


-- 
mike
The Horde Project
http://www.horde.org
https://www.facebook.com/hordeproject
https://www.twitter.com/hordeproject
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5869 bytes
Desc: S/MIME Signature
URL: <http://lists.horde.org/archives/horde/attachments/20150612/bab480df/attachment.bin>