STARTTLS broken, password sent in the clear

Anders Kaseorg <[email protected]>
Newsgroups gmane.comp.gnome.evolution.devel
Message-ID <loom.20060509T232723-501__38727.2303262309$1147211453$gmane$org@post.gmane.org> 
Can someone please look at <http://bugzilla.gnome.org/show_bug.cgi?id=339903>?
When you tell Evolution to use TLS encryption on an IMAP4rev1 server, it sends a
STARTTLS, then proceeds to ignore the server's response and sends out your
password in plain text anyway. Obviously, this doesn't work at all, and is a
security problem.

Anders
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.