[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
bug#28597: 26.0.60; [Security] Configure should use --without-pop by def
From: |
Robert Pluim |
Subject: |
bug#28597: 26.0.60; [Security] Configure should use --without-pop by default |
Date: |
Tue, 26 Sep 2017 11:13:38 +0200 |
User-agent: |
Gnus/5.13 (Gnus v5.13) Emacs/26.0.60 (gnu/linux) |
John Wiegley <jwiegley@gmail.com> writes:
>>>>>> "NJ" == N Jackson <nljlistbox2@gmail.com> writes:
>
> NJ> Configure issues the following warning:
> NJ> configure: WARNING: This configuration installs a 'movemail' program
> NJ> that retrieves POP3 email via only insecure channels.
> NJ> To omit insecure POP3, you can use './configure --without-pop'.
>
> NJ> If the warning is true, then --without-pop should be the default, and
> NJ> users should have to explicitly request an insecure Emacs with --with-pop.
>
> You are requesting a change in behavior that is exceedingly old, so I would
> like to hear from others what they think about making a change like this.
> Given how much less of a thing POP is becoming over the years, I'd be in favor
> of changing the default here.
I'm sure there are still people stuck with using POP3, but they should
be gently incited to move to POP3S or IMAPS the same way people should
be steered away from http and TLS < 1.2. Making the default be
--without-pop is one way to do that.
Regards
Robert
- bug#28597: 26.0.60; [Security] Configure should use --without-pop by default, N. Jackson, 2017/09/25
- bug#28597: 26.0.60; [Security] Configure should use --without-pop by default, John Wiegley, 2017/09/25
- bug#28597: 26.0.60; [Security] Configure should use --without-pop by default,
Robert Pluim <=
- bug#28597: 26.0.60; [Security] Configure should use --without-pop by default, Glenn Morris, 2017/09/26
- bug#28597: 26.0.60; [Security] Configure should use --without-pop by default, Paul Eggert, 2017/09/26
- bug#28597: 26.0.60; [Security] Configure should use --without-pop by default, N. Jackson, 2017/09/29
- bug#28597: 26.0.60; [Security] Configure should use --without-pop by default, Eli Zaretskii, 2017/09/29
- bug#28597: 26.0.60; [Security] Configure should use --without-pop by default, N. Jackson, 2017/09/29