Closed spring-projects-issues closed 18 years ago
Juergen Hoeller commented
Done - email addresses are now only visible to logged-in users (which should be good enough). Actually we meant to do this for a long time but somehow never got around to do it.
Juergen
Rick Mann commented
Thank you for the amazingly fast response! My only concern is that it is ridiculously easy to get a login. There's no CAPTCHA, not even an email verification. A spambot could easily exist to automatically log in to JIRA sites...
I'm going to mark this bug still open, because I don't know if you'll see this comment otherwise. Please feel free to close it. Thanks again!
Rick Mann commented
I guess I spoke too soon...I don't know how to reopen this bug.
Juergen Hoeller commented
Point taken... I changed the visibility to "hidden". Let's see if someone complains, in particular for what reason :-)
Juergen
Rick Mann opened SPR-2440 and commented
According to the JIRA website, the way to obfuscate email addresses is in global JIRA configuration settings. Please do this. Thank you.
No further details from SPR-2440