Uploaded image for project: 'Infrastructure'
  1. Infrastructure
  2. INFRA-13706

Attempting to reset my password sends encrypted email

    Details

    • Project:
      Cordova

      Description

      Submitted a password change via https://id.apache.org/reset/enter
      and I get an unreadable email :
      -----BEGIN PGP MESSAGE-----
      Version: GnuPG v1.4.10 (GNU/Linux)
      hQIDESEDAAmRJqnyLmnGj8ynifZ ...

      I am not sure what changed, or even if it is something I did, but I used to receive a link a'la :
      ---
      If you requested this password reset, please use the following link to
      reset your Apache LDAP password:

            https://id.apache.org/reset/token/ZZZZZ

        Activity

        Hide
        purplecabbage Jesse MacFadyen added a comment - Reporter
        Thanks, I figured it out, just was not expecting the extra steps of decrypting.
        Show
        purplecabbage Jesse MacFadyen added a comment - Reporter Thanks, I figured it out, just was not expecting the extra steps of decrypting.
        Hide
        sebb@apache.org Sebb added a comment -
        This is done for security.

        As per
        https://id.apache.org/reset/enter
        "The email will be encrypted to your public PGP key, if your profile identifies one."

        Save the email to a file and use gpg to decrypt it using your private key.
        Show
        sebb@apache.org Sebb added a comment - This is done for security. As per https://id.apache.org/reset/enter "The email will be encrypted to your public PGP key, if your profile identifies one." Save the email to a file and use gpg to decrypt it using your private key.
        Hide
        gmcdonald Gavin added a comment -
        The password email is encrypted with the PGP key you added to your LDAP account.

        Let us know if you cant find that key and we'll reset the account to send a plain text version instead.
        Show
        gmcdonald Gavin added a comment - The password email is encrypted with the PGP key you added to your LDAP account. Let us know if you cant find that key and we'll reset the account to send a plain text version instead.

          People

          • Assignee:
            gmcdonald Gavin
            Reporter:
            purplecabbage Jesse MacFadyen
            Request participants:
            None
          • Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved: