Re: [Fwd: Re: [Fwd: STARTTLS vulnerabilty and qmail-spamcontrol ucspi-ssl qpsmtpd]]

Jared Johnson wrote:
> I ... disagree.  From my reading of plugins/tls, it looks like there is
> no problem at all, in the non-async code path.  It resets STDIN and
> STDOUT to a socket created from scratch by the IO::Socket::SSL module.
>
> I haven't looked at IO::Socket::SSL to see if it has this sort of
> issue, but it seems unlikely to me.

Ah good news then. Hopefully someone will apply my pull request for that 
patch.

Matt.