I'm very new to this whole "Trac" system as well as this mailing list. So I'm not sure how to create a new ticket for this. I saw the existing ticket and the problem was first reported 3 years ago and still hasn't been changed, making me believe the developers don't see the severity of the situation.

The existing ticket doesn't mention the security risks involved which is the main reason I want this feature implemented. If people send email around with wrong identities, that's a nuisance. But if they expose information that should never be exposed (like the servers they login to and the login names they use to do it), that's a serious security risk. So I would really like to open a new ticket for this and emphasize on the security. Problem is I haven't figured out yet how, so I will go through the website. But if someone can give me a nudge in the right direction, saving me some time in the process, that would be greatly appreciated. ;)

> Jim Pingle wrote:
> > Dennis P. Nikolaenko wrote:
> >> C P wrote:
> >>> So my request is to force a user to create a new identity the first
> >>> time he logs in, or at least have him confirm the identity created by RC.
> >>>
> >> Please use http://trac.roundcube.net to post this issue. It is really
> >> interesting.
> >>
> >
> > There is a ticket for this already, but I do not know if it is currently
> > closed or open. I wrote a patch a long time ago to force a user to the
> > Identity screen upon first login. I'm not sure what happened to it, but
> > I know someone else had looked at it just a month or two ago.
> >
> > I'll see if I can dig it up anywhere.
> >
>
> Well that was easier to find than I had anticipated:
> http://trac.roundcube.net/ticket/1291605

---

Express yourself instantly with MSN Messenger! MSN Messenger