You are not logged in.

#1 2015-05-04 02:01:32

sajan
Member
From: USA
Registered: 2015-04-03
Posts: 13
Website

Mutt Security Concern

I'm switching over to Mutt from Thunderbird and putting my passwords in a sourced, gpg encrypted file.  The wiki states there is some scenario during which the password can be seen in plain text.  I have been using Mutt for about 2 weeks now and am using the enter-command, but haven't seen the password on screen at all.

Was wondering if something could clarify or exand on the following from the wiki...

https://wiki.archlinux.org/index.php/Mu … ty_concern

If enter-command is available from the UI, it is possible to see the password unencrypted, which my be undesired if anybody else than you has access to your session while Mutt is running. You may want to disable it for this reason. As a consequence, every command that the user intends to use must be bound to a key in advance, otherwise it will never be accessible.

Thanks.

Offline

Board footer

Powered by FluxBB