|
From: | Paul Eggert |
Subject: | bug#28597: 26.0.60; [Security] Configure should use --without-pop by default |
Date: | Mon, 2 Oct 2017 16:20:26 -0700 |
User-agent: | Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.3.0 |
On 10/02/2017 11:47 AM, Eli Zaretskii wrote:
nagging users each time they invoke movemail to fetch via POP3 is IMO unacceptable.
Yes, that suggestion is problematic. But that (older) discussion is somewhat independent of the current thread, which is about builders and installers more than it is about users.
we also use an encrypted POP3 connection _if_it's_available_, e.g. via Mailutils, Gnus, etc.
The concern here is about RMAIL, which currently uses Emacs movemail in the all-too-common case where Mailutils is not installed. In emacs-26 the relevant section of the Emacs manual (doc/emacs/rmail.texi) says for the pop: protocol: "If the server supports it, ‘movemail’ tries to use an encrypted connection—use the ‘pops’ form to require one." This documents 'pop:' as meaning "encrypt if the server supports encryption, otherwise fall back on unencrypted", which is a natural expectation for users nowadays and is how Thunderbird works by default; but it's not how RMAIL works with Emacs movemail and 'pop:', as these connections are always unencrypted.
I think we've cut enough slices of this salami, so let's stop,
Does this mean, stop before installing the patch proposed in Bug#28597#62, or stop after installing that patch? I hope it means the latter. That patch attempts to implement your suggestion in Bug#28597#32, as quoted below:
> From: Robert Pluim <rpluim <at> gmail.com> ...> > I thought we were discussing making --without-pop be the default even> if GNU Mailutils are not available, and it's what I'm > advocating. Paul's patch only did that if they were found. If that's what people want, fine with me on Posix platforms, but not on MS-Windows (where Mailutils are not available, and probably never will be).
[Prev in Thread] | Current Thread | [Next in Thread] |