| View Issue Details [ Jump to Notes ] | [ Issue History ] [ Print ] | ||||||||
| ID | Project | Category | View Status | Date Submitted | Last Update | ||||
|---|---|---|---|---|---|---|---|---|---|
| 0000057 | SKGB-intern | neues-kennwort | public | 2005-12-04 03:49 | 2017-09-12 21:31 | ||||
| Reporter | aj | ||||||||
| Assigned To | |||||||||
| Priority | normal | Severity | feature | Reproducibility | N/A | ||||
| Status | resolved | Resolution | won't fix | ||||||
| Projection | major rework | ETA | none | ||||||
| Platform | WWW | OS | iCab | OS Version | 3.0b | ||||
| Product Version | 1.0.1 | Product Build | |||||||
| Target Version | 2.0 | Fixed in Version | 2.0 | ||||||
| Summary | 0000057: Confirmation page on new password confirm | ||||||||
| Description | It'd be nice if people had the opportunity to review their action before their new password is set. A click onto the appropiate link in the email would then lead to a page with both a cancel button and a new password button. See the RISK digest mailing list's behaviour as an example (http://www.risks.org/). | ||||||||
| Additional Information | Security Considerations: Implementing would lessen the impact of storing the name/password combo in clear in pwtickets. | ||||||||
| Tags | No tags attached. | ||||||||
| Attached Files |
| ||||||||
Notes |
|
|
aj (manager) 2017-09-12 21:31 |
As of 2.0 the new Access Code semantics no longer require a confirmation, making this issue moot. |

