Installation Assistant sends cleartext password by mail

For problem reports, and discussions about the CMSMS 2.2 beta.

This board will be locked once CMSMS 2.2 is officially released.
Locked
tristan
Dev Team Member
Dev Team Member
Posts: 374
Joined: Tue May 02, 2006 10:58 am
Location: The Netherlands

Installation Assistant sends cleartext password by mail

Post by tristan »

IMHO it would be better to not include the admin password in the mail thats sent after a successful installation. Since email is inherently insecure and know the password is saved in at least one location (mailbox) in cleartext.

Maybe we could skip the "Your installation of CMS Made Simple is complete." email altogether since we already know we installed the CMS successfully because the Installation Assistant told us and we're going to set the Mail Settings properly after we login the first time anyway.
calguy1000
Support Guru
Support Guru
Posts: 8169
Joined: Tue Oct 19, 2004 6:44 pm
Location: Fernie British Columbia, Canada

Re: Installation Assistant sends cleartext password by mail

Post by calguy1000 »

You can choose not to receive the email by turning on the advanced mode.

But... people have requested that we NOT drop the email.
Follow me on twitter
Please post system information from "Extensions >> System Information" (there is a bbcode option) on all posts asking for assistance.
--------------------
If you can't bother explaining your problem well, you shouldn't expect much in the way of assistance.
tristan
Dev Team Member
Dev Team Member
Posts: 374
Joined: Tue May 02, 2006 10:58 am
Location: The Netherlands

Re: Installation Assistant sends cleartext password by mail

Post by tristan »

Shouldn't it be an option to send the email in advanced mode and make it default not to send out an email to make new installs a little more secure?
Locked

Return to “[locked] CMSMS 2.2 Beta”