[horde] Remote Mail Account in Horde / Password
Michael J Rubinsky
mrubinsk at horde.org
Fri Jun 12 22:17:13 UTC 2015
Quoting Andreas Mauser <andreas at mauser.info>:
> ----- Nachricht von Erling Preben Hansen <erling at eph.dk> ---------
> Datum: Fri, 12 Jun 2015 21:36:11 +0000
> Von: Erling Preben Hansen <erling at eph.dk>
> Antwort an: erling at eph.dk
> Betreff: Re: [horde] Remote Mail Account in Horde / Password
> An: horde at lists.horde.org
>
>
>> Citat af Andreas Mauser <andreas at mauser.info>:
>>
>>> Hi,
>>>
>>> I want to add a GMX Account in Horde. It works, but every time I log into
>>> Horde I also have to put in password for my GMX Account.
>>>
>>> How to make it so that the GMX password is remembered?
>>>
>>> Thank you,Andreas
>>
>> Hey Andreas
>>
>> This has been discussed before..
>> It is not possible.
>> And in my opinion is a serious security risk.
>> Since you as an admin will be responsible of storing and securing passwords
>> of third party services.
>> When this is a sensible personal service, as a mail account is.
>> I wouldn't recommend it.
>
> I would recommend it, because the user must first authenticate via
> Horde Authentication, in any way.
> So if I collect 3 external mail accounts, I need to log on 4 times.
> If the password could be stored e.g. in the database only the well
> trusted administrator would have access to it. But I hope they are
> all Snowdens...
...and of course if that one account is compromised, this compromises
ALL your accounts. Kind of defeats the recommended security practice
of using different passwords for each account.
--
mike
The Horde Project
http://www.horde.org
https://www.facebook.com/hordeproject
https://www.twitter.com/hordeproject
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5869 bytes
Desc: S/MIME Signature
URL: <http://lists.horde.org/archives/horde/attachments/20150612/bab480df/attachment.bin>
More information about the horde
mailing list