Bug#745556: kmail accepts invalid SMTP TLS certificate against user action
On Tue, Apr 22, 2014 at 10:33:28PM +0300, Rémi Denis-Courmont wrote:
> The "continue" button yields another dialog letting the user choose how
> long to accept the certificate, either forever, or only for the current
> session. If the dialog is closed without answer, Kmail assumes forever.
> At that point, the mail feeder will happily send user credentials over
> to the untrusted server.
This is a problem with kio. Closing the dialog causes the default option
to be selected. I have raised this in KDE BTS along with a proposed
patch: https://bugs.kde.org/show_bug.cgi?id=335375
--
Jim Scadden
Reply to: