In game E-Mail authentication CAN'T work

[DaEezT]

I just found out that the in game E-Mail feature can't work when authentication is required by the server because the game doesn't supply the smtp server with the password but a bunch of ***

heres the data I captured while testing the e-mail feature

0000 00 50 7f 21 87 4c 00 50 8d 52 a8 82 08 00 45 00 .P.!.L.P.R....E.
0010 00 55 10 74 40 00 80 06 8f 4f c0 a8 00 51 d9 48 .U.t@....O...Q.H
0020 c0 9d 07 2b 00 19 5e 7a 46 05 7d 88 44 2b 50 18 ...+..^zF.}.D+P.
0030 ff 2c d3 6b 00 00 41 55 54 48 20 50 4c 41 49 4e .,.k..AUTH PLAIN
0040 20 63 69 31 33 4c 57 55 41 63 69 31 33 4c 57 55 ci13LWUAci13LWU
0050 41 4b 69 6f 71 4b 69 6f 71 4b 69 6f 71 4b 67 3d AKioqKioqKioqKg=
0060 3d 0d 0a =..

more readable it says:

AUTH PLAIN ci13LWUAci13LWUAKioqKioqKioqKg==

AUTH PLAIN is a smtp authentication method (very insecure because everyone can read your password )

"The mechanism consists of a single message from the client to the server. The client sends the authorization identity (identity to login as), followed by a US-ASCII NULL character, followed by the authentication identity (identity whose password will be used), followed by a US-ASCII NULL character, followed by the clear-text password. The client may leave the authorization identity empty to indicate that it is the same as the authentication identity."

The message is Base64 encoded and decodes into

r-w-e r-w-e **********

So the game does supply the smtp server with the password filler characters instead the actual password

 

[jaimehlers]

This would certainly explain why I couldn't connect with my friend via PBEM.

 

[Quantum7]

Did this get fixed with 1.09?

 

[DaEezT]

Did this get fixed with 1.09?

Nope...

Well, they never said they fixed it in the change log

 

[MindzEye]

I've loaded the latest patch 1.52, and in trying to start a PBEM game, I see this same bug. Does anyone know if this is getting fixed in an upcoming patch? Or is it supposed to be fixed already in V1.52?
-Mindzeye