http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3477 --- Comment #1 from Galen Charlton <gmcharlt@gmail.com> 2009-08-04 01:17:09 --- (In reply to comment #0)

Sponsored by East Brunswick Public Library, East Brunswick, NJ, USA.

Plaintext passwords can only be stored for patrons added or patron passwords edited after the syspref is turned on; it cannot retroactively convert existing passwords. Thus, if this capability is desired, the feature must be present and the syspref turned on before patron import. Libraries should consider the security implications of having plaintext passwords visible.

This worries me, particularly if *staff* passwords are also stored in plaintext. Although it may be water under the bridge with respect to the sponsoring library, typical best practice for password security is to store a password as a one-way hash, and if a patron forgets their password, have the library *reset* it rather than read it off to the patron. -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3477 MJR <mjr@ttllp.co.uk> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mjr@ttllp.co.uk --- Comment #2 from MJR <mjr@ttllp.co.uk> 2009-09-25 19:54:52 --- (In reply to comment #1)

This worries me, particularly if *staff* passwords are also stored in plaintext. Although it may be water under the bridge with respect to the sponsoring library, typical best practice for password security is to store a password as a one-way hash, and if a patron forgets their password, have the library *reset* it rather than read it off to the patron.

I agree: addition of this syspref appears to be a security bug. It would also prevent a koha login being proof of a user's activity in any security breach. I'm surprised if this isn't against privacy laws in the US, but I'm often surprised by how weak US privacy safeguards are. Should this request be resolved as a WONTFIX? -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3477 --- Comment #4 from Jane Wagner <jwagner@ptfs.com> 2009-09-26 13:28:40 --- We wrote this at the request of the site, and are obligated to submit it, but we understand the security implications and are prepared to maintain it locally for this site if it seems advisable not to accept it into the main Koha code. -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3477 MJR <mjr@ttllp.co.uk> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|FIXED |WONTFIX --- Comment #6 from MJR <mjr@ttllp.co.uk> 2010-04-28 15:38:01 --- Correcting resolution tag. -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.