[BUG] Creating a mail account is using unsecure default

REPRODUCIBILITY: Always
OS VERSION: 4.4.0.72
HARDWARE: Xperia XA2, Xperia 10 ii, Xperia 10 iii
UI LANGUAGE: French
REGRESSION: None

DESCRIPTION:

When creating a new email account, which is not known by the database of providers, the default values used for the server protocol are imap, using port 143 and no security, and smtp, using port 25 and no security. This is insecure and should be changed to more robust default values, using ssl and port 993 for imap, using ssl and port 465 for smtp.

Worse, this is also the case when using an address in @wanadoo.fr address, in which case there is even not the opportunity to review the settings before the final account creation (and i fear that a plain unencrypted connection is done to the server).

PRECONDITIONS:

No preconditions.

STEPS TO REPRODUCE:

  1. create a new mail account, using a custom address provider (to reproduce, you can safely use a non existing one)
  2. check that « Connexion sécurisée » (should be something like secure connection in english) is set to « Inutilisé » (unused ?) in both imap and smtp, and ports are 143 and 25

EXPECTED RESULT:

Secure connection should be set to ssl in both cases, and ports should be 993 and 465.

ACTUAL RESULT:

MODIFICATIONS:

No changes, tested from a freshly flashed device.

ADDITIONAL INFORMATION:

Nothing else relevant.

5 Likes

On an additional note, there are a few public mail providers that are not known in the database, whereas they should be. Where should i report these ? Here on the forum, or is the database coming from an external project ?

3 Likes