Thunderbird does not ask for password when sending second mail !!!

[Ric Moore]

On 07/12/2012 04:07 AM, Gilles Gravier wrote:
> Basil,
>
> On 12/07/2012 10:02, Basil Chupin wrote:
>> On 11/07/12 15:57, Jkhatri wrote:
>>> Dear all
>>>
>>> I'm using thunderbird 13.0.1 on my ubuntu 12.04,
>>>
>>> when I start Thunderbird for the first time during a day it asks for
>>> password to receive the mail , and it also asks for password when I
>>> send first new email or reply to any received mail, thats ok , but
>>> after that done successfully whenever I try send/reply to 2nd mail it
>>> does not ask for password it simply sends the mail. I want to
>>> configure Thunderbird to ask for password each and every time I send
>>> mail , is there any configuration available in Thunderbird ???
>>>
>>>
>>> Thanks in advance
>>>
>>> Warm Regards
>>> ./
>>> Jatin khatri
>>
>> (I know that I just should not get involved in this, but being a
>> student of how to resolve problems asked by some people - I cannot
>> resist...)
>>
>> Jatin, why EXACTLY are you asking this question? What is it that is
>> concerning you to ask the above question? Let me explain a bit.....
>>
>> You get the first e-mail for the day and reply to it with Thunderbird
>> asking you for your password - but then when you want to send any
>> subsequent (ie, other, following, e-mails) you want it to also ask
>> again, and again, and again, and again, for each e-mail, after the
>> very first e-mail, your password. Is this a correct description of
>> what your request for help?
>>
>> If this is so, my question is: what is so special about your
>> subsequent e-mails, after the first one you sent, which would want you
>> to have Thunderbird ask you every time for you password?
>
> Potential security issue. If he forgets to log off when he goes to get a
> tea or a coffee, somebody can use his logged-in TBird session to send
> e-mails impersonating him. Sometimes the automatic screenlock takes
> place after a few minutes. Window of opportunity for somebody to come
> and do nasty things. If you are in an environment where such activity is
> a risk (university, cyber cafe, office area, hospital, you name it),
> then it would be nice to have an option to "always require password for
> sending mail". I.e. to disable the password caching mecanism.
>
> Think "sudo" when you use "sudo" you get prompted for a password. If you
> use sudo immediately after, no need to re-enter a password. If you wait
> a few minutes, you are prompted again for your password. Sudo is a
> dangerous command that somebody using your session should not be able to
> re-use if you used it before giving them access. Same goes for sending
> e-mail (in some contexts as explained above).
If you never ticked the "remember password" box, it would ask you each 
time. I just checked, it ought to be somewhere in 
.thunderbird/<userprofile> prefs.js
I didn't find it there, but I would hazard a guess that a closer 
inspection should find it. Ric

-- 
My father, Victor Moore (Vic) used to say:
"There are two Great Sins in the world...
..the Sin of Ignorance, and the Sin of Stupidity.
Only the former may be overcome." R.I.P. Dad.
http://linuxcounter.net/user/44256.html