You are viewing a plain text version of this content. The canonical link for it is here.
Posted to infrastructure-issues@apache.org by "#asfinfra IRC Bot (JIRA)" <ji...@apache.org> on 2010/11/18 13:30:14 UTC

[jira] Closed: (INFRA-3209) JIRA sends plaintext password in confirmation email

     [ https://issues.apache.org/jira/browse/INFRA-3209?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

#asfinfra IRC Bot closed INFRA-3209.
------------------------------------

    Resolution: Fixed

> JIRA sends plaintext password in confirmation email
> ---------------------------------------------------
>
>                 Key: INFRA-3209
>                 URL: https://issues.apache.org/jira/browse/INFRA-3209
>             Project: Infrastructure
>          Issue Type: Improvement
>      Security Level: public(Regular issues) 
>          Components: JIRA
>            Reporter: Nick Wellnhofer
>            Priority: Minor
>
> When I signed up for Apache JIRA, I was surprised to see that the confirmation email contained the password I had chosen in plaintext. From a security standpoint it's a bad idea to send plaintext passwords by email.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.