On Tue, Apr 22, 2014 at 10:33:28PM +0300, RĂ©mi Denis-Courmont wrote:
> The "continue" button yields another dialog letting the user choose how
> long to accept the certificate, either forever, or only for the current
> session. If the dialog is closed without answer, Kmail assumes forever.
> At that point, the mail feeder will happily send user credentials over
> to the untrusted server.

This is a problem with kio. Closing the dialog causes the default option 
to be selected. I have raised this in KDE BTS along with a proposed 
patch: https://bugs.kde.org/show_bug.cgi?id=335375


-- 

Jim Scadden


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to