{"action":"created","issue":{"url":"https://api.github.com/repos/zammad/zammad/issues/460","repository_url":"https://api.github.com/repos/zammad/zammad","labels_url":"https://api.github.com/repos/zammad/zammad/issues/460/labels{/name}","comments_url":"https://api.github.com/repos/zammad/zammad/issues/460/comments","events_url":"https://api.github.com/repos/zammad/zammad/issues/460/events","html_url":"https://github.com/zammad/zammad/issues/460","id":191495103,"number":460,"title":"Encrypt channel passwords stored in DB","user":{"login":"olivergrahl","id":4621219,"avatar_url":"https://avatars.githubusercontent.com/u/4621219?v=3","gravatar_id":"","url":"https://api.github.com/users/olivergrahl","html_url":"https://github.com/olivergrahl","followers_url":"https://api.github.com/users/olivergrahl/followers","following_url":"https://api.github.com/users/olivergrahl/following{/other_user}","gists_url":"https://api.github.com/users/olivergrahl/gists{/gist_id}","starred_url":"https://api.github.com/users/olivergrahl/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/olivergrahl/subscriptions","organizations_url":"https://api.github.com/users/olivergrahl/orgs","repos_url":"https://api.github.com/users/olivergrahl/repos","events_url":"https://api.github.com/users/olivergrahl/events{/privacy}","received_events_url":"https://api.github.com/users/olivergrahl/received_events","type":"User","site_admin":false},"labels":[{"id":23808348,"url":"https://api.github.com/repos/zammad/zammad/labels/security","name":"security","color":"e10c02","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2016-11-24T11:19:57Z","updated_at":"2016-11-24T12:27:23Z","closed_at":null,"body":"Passwords for email channels (SMTP, IMAP...) seem to get stored in the database in clear text. Wouldn't it be better storing them in an encrypted form?"},"comment":{"url":"https://api.github.com/repos/zammad/zammad/issues/comments/262765207","html_url":"https://github.com/zammad/zammad/issues/460#issuecomment-262765207","issue_url":"https://api.github.com/repos/zammad/zammad/issues/460","id":262765207,"user":{"login":"rkaldung","id":378324,"avatar_url":"https://avatars.githubusercontent.com/u/378324?v=3","gravatar_id":"","url":"https://api.github.com/users/rkaldung","html_url":"https://github.com/rkaldung","followers_url":"https://api.github.com/users/rkaldung/followers","following_url":"https://api.github.com/users/rkaldung/following{/other_user}","gists_url":"https://api.github.com/users/rkaldung/gists{/gist_id}","starred_url":"https://api.github.com/users/rkaldung/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rkaldung/subscriptions","organizations_url":"https://api.github.com/users/rkaldung/orgs","repos_url":"https://api.github.com/users/rkaldung/repos","events_url":"https://api.github.com/users/rkaldung/events{/privacy}","received_events_url":"https://api.github.com/users/rkaldung/received_events","type":"User","site_admin":false},"created_at":"2016-11-24T12:27:23Z","updated_at":"2016-11-24T12:27:23Z","body":"As far as you need/have a mechanism to decrypt the password it's only security by obscurity. Nothing worth to work on."}}
{"actor":{"display_login":"rkaldung"}}