Re: ANN: getmail v. 5.9

Charles Cazabon <[email protected]>
Newsgroups gmane.mail.getmail.user
Message-ID <[email protected]>
Daniel Kahn Gillmor <[email protected]> wrote:
> 
> thanks for this release, Charles.  I've just uploaded it to debian unstable.

You're welcome, and thanks for maintaining the package.

> i think i understand how the "ssl_version = tlsv1_2" line fits into the
> getmail config.  I don't see what the "tlsv1_2" solo line is supposed to
> be doing there.  Can you explain it more?

No, because it's not supposed to be there :P  Copy-paste error.  I've removed
it from the online copy and regenerated the tarball (without bumping the
version) since it's still just a doc-only change.

> Also, why not just supply SNI if using TLS v1.3,  Rather than working
> around it?  Is there a specific constraint in imaplib that prevents this?

There are a number of problems with this.  The biggest one is that it will
cause connections to fail if the server name the user puts in their getmailrc
file resolves to the correct IP address but which the server does not consider
as (one of) its proper name(s).  This happens a lot with servers having many
DNS aliases but which don't have valid SSL certificates installed for every
corresponding name.

So if I did this, getmail users with working configs that upgraded could
suddenly find themselves unable to retrieve mail, with no obvious cause as to
why.  The benefits don't outweigh this risk.

Charles
-- 
-----------------------------------------------------------------------
Charles Cazabon
GPL'ed software available at:               http://pyropus.ca/software/
-----------------------------------------------------------------------
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.