Re: ANN: getmail v. 5.9
Charles Cazabon <[email protected]>
| Newsgroups | gmane.mail.getmail.user |
|---|---|
| Message-ID | <[email protected]> |
Daniel Kahn Gillmor <[email protected]> wrote: > > thanks for this release, Charles. I've just uploaded it to debian unstable. You're welcome, and thanks for maintaining the package. > i think i understand how the "ssl_version = tlsv1_2" line fits into the > getmail config. I don't see what the "tlsv1_2" solo line is supposed to > be doing there. Can you explain it more? No, because it's not supposed to be there :P Copy-paste error. I've removed it from the online copy and regenerated the tarball (without bumping the version) since it's still just a doc-only change. > Also, why not just supply SNI if using TLS v1.3, Rather than working > around it? Is there a specific constraint in imaplib that prevents this? There are a number of problems with this. The biggest one is that it will cause connections to fail if the server name the user puts in their getmailrc file resolves to the correct IP address but which the server does not consider as (one of) its proper name(s). This happens a lot with servers having many DNS aliases but which don't have valid SSL certificates installed for every corresponding name. So if I did this, getmail users with working configs that upgraded could suddenly find themselves unable to retrieve mail, with no obvious cause as to why. The benefits don't outweigh this risk. Charles -- ----------------------------------------------------------------------- Charles Cazabon GPL'ed software available at: http://pyropus.ca/software/ -----------------------------------------------------------------------