Comment 24 for bug 24220

Revision history for this message
In , Bienvenu (bienvenu) wrote :

> But I don't think that matters because of the reason this bug exists: it's
> insecure anyway.
Not sure I understand that. For a user who's had secure auth working just fine, because they've got a correctly functioning server, using insecure auth is *less* secure. Yes, secure auth is not completely secure, but it's more secure.

Some of the code would not be one time only - if we make new server setup be smart enough to try secure auth and set the secure auth pref if it succeeds, and silently fail if it fails, and clear the secure auth pref, then that would share code with this.

With your up to date patch, could you make sure you change the strings that say "you choose" to "you have chosen" like I did in my patch?