From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Resent-From: nljlistbox2@gmail.com (N. Jackson) Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Mon, 25 Sep 2017 15:12:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: 28597@debbugs.gnu.org X-Debbugs-Original-To: bug-gnu-emacs@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.150635230520697 (code B ref -1); Mon, 25 Sep 2017 15:12:01 +0000 Received: (at submit) by debbugs.gnu.org; 25 Sep 2017 15:11:45 +0000 Received: from localhost ([127.0.0.1]:58614 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dwV2t-0005Ni-4a for submit@debbugs.gnu.org; Mon, 25 Sep 2017 11:11:43 -0400 Received: from eggs.gnu.org ([208.118.235.92]:40378) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dwV2p-0005NS-7w for submit@debbugs.gnu.org; Mon, 25 Sep 2017 11:11:41 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dwV2g-00076L-Qb for submit@debbugs.gnu.org; Mon, 25 Sep 2017 11:11:34 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: * X-Spam-Status: No, score=1.1 required=5.0 tests=BAYES_50, FREEMAIL_ENVFROM_END_DIGIT,FREEMAIL_FROM,T_DKIM_INVALID autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:55716) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1dwV2g-00075v-MS for submit@debbugs.gnu.org; Mon, 25 Sep 2017 11:11:30 -0400 Received: from eggs.gnu.org ([2001:4830:134:3::10]:59581) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dwV2a-0003Kc-KA for bug-gnu-emacs@gnu.org; Mon, 25 Sep 2017 11:11:30 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dwV2X-0006n2-As for bug-gnu-emacs@gnu.org; Mon, 25 Sep 2017 11:11:24 -0400 Received: from mail-it0-x22a.google.com ([2607:f8b0:4001:c0b::22a]:48244) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1dwV2X-0006mL-2u for bug-gnu-emacs@gnu.org; Mon, 25 Sep 2017 11:11:21 -0400 Received: by mail-it0-x22a.google.com with SMTP id m123so7519970ita.3 for ; Mon, 25 Sep 2017 08:11:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:subject:date:message-id:mime-version; bh=q3f6DM94XH7222k16KAu5Ge+U1ONAQMTUMYM2M7oXYY=; b=mubTlx7jxstKrhYAumwpIXpONA1zkLGhEDbPh585xxMSdaTUmwZ0BTixVuy5KynxI7 ZdI+iuep7lsB5aQFg/baoI+hynL5vzCrGkrfn+7piddY3STwy61j4etbmvMulVPVXXUF R8VHwbwuZtvmCG5s5QAK301vNqW2VZFkJa35xAnA/3O9LE1ZyXo4mYKiIeNxaJbZLbWK y+lh0+tgJLG/7GejLX0SwOQhQsLLMOm3GCwD/6UqURmc9LzA4q1QUa3Z0VB9H9MMlhgR 01PLjDPKUueNf8E3uswF+GFqHkT3T3hkKd3wAN5oKWIhsIwZbNBWcOzx2w+3hHL8vsBm H1bQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:subject:date:message-id:mime-version; bh=q3f6DM94XH7222k16KAu5Ge+U1ONAQMTUMYM2M7oXYY=; b=a36YkK0wusmqBzoYG0x2o+5eB94sYmdHYkDWo/mH8VfaNY/mYyGIEXbGtNd0Mldk06 m+O4mh5zhLRkXZhHrs66T9GHrtHOGRwrtiZbCYEbEQmhUDJ+CsoSAoRrCw0OSwQgwkHt RjbCM/Ms7c/jewHL3NjNZ3rAzIOtirHqm+B6+aftJWpsnjSrb0isGag53AZHjUMyjEP3 5RsgrPWT8uLCq8BgkdRvnYfXdpuiJJh2igly/cSXNkzh8t7+prZhbT3jlm8Pv7YWruPy fOXn438uSBqjuUqpD/rcrIVj0wopaPjzO2vt3AZHQO8+1b65OngHzggmSP2/nok2Munr 4tOw== X-Gm-Message-State: AHPjjUj6clQlb2RtxxT6CKBXe2PpNyRXu9/sJUA8NXD60NJbcrEwazAE 8cVoYGTGcX8k5Jw/U9njbZJ19A== X-Google-Smtp-Source: AOwi7QBXUfXW/HMESIaxeGWY/Dd5qgY9eK1tao+T2mP3KQSo/ekVbkgBZY9JW4XiKK0NR1jp0wd98w== X-Received: by 10.36.16.130 with SMTP id 124mr1022083ity.105.1506352280051; Mon, 25 Sep 2017 08:11:20 -0700 (PDT) Received: from moondust.localdomain.nodomain.none ([72.143.113.194]) by smtp.gmail.com with ESMTPSA id t127sm2989700iod.26.2017.09.25.08.11.18 for (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Mon, 25 Sep 2017 08:11:19 -0700 (PDT) From: nljlistbox2@gmail.com (N. Jackson) Date: Mon, 25 Sep 2017 11:11:18 -0400 Message-ID: <87fubaq0dl.fsf@moondust.localdomain> MIME-Version: 1.0 Content-Type: text/plain X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -3.8 (---) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.8 (---) Configure issues the following warning: configure: WARNING: This configuration installs a 'movemail' program that retrieves POP3 email via only insecure channels. To omit insecure POP3, you can use './configure --without-pop'. If the warning is true, then --without-pop should be the default, and users should have to explicitly request an insecure Emacs with --with-pop. N. In GNU Emacs 26.0.60 (build 1, x86_64-pc-linux-gnu, GTK+ Version 3.22.17) of 2017-09-24 built on moondust.localdomain Repository revision: d93301242f38d3d9aaa55899c07496f0bdecf391 Windowing system distributor 'Fedora Project', version 11.0.11903000 System Description: Fedora release 25 (Twenty Five) Recent messages: Saving file /home/nlj/.emacs.d/url/cookies... Wrote /home/nlj/.emacs.d/url/cookies Auto-saving...done Mark set Sending... Mark set [2 times] Sending via mail... Sending email Sending email done Sending...done Configured using: 'configure --without-pop 'CFLAGS=-O2 -g3 -gdwarf-4'' Configured features: XPM JPEG TIFF GIF PNG RSVG IMAGEMAGICK SOUND DBUS GSETTINGS NOTIFY ACL LIBSELINUX GNUTLS LIBXML2 FREETYPE LIBOTF XFT ZLIB TOOLKIT_SCROLL_BARS GTK3 X11 LCMS2 Important settings: value of $LANG: en_CA.UTF-8 value of $XMODIFIERS: @im=none locale-coding-system: utf-8-unix Major mode: Text Minor modes in effect: csv-field-index-mode: t TeX-PDF-mode: t diff-auto-refine-mode: t flyspell-mode: t pdf-occur-global-minor-mode: t shell-dirtrack-mode: t recentf-mode: t display-battery-mode: t display-time-mode: t show-paren-mode: t savehist-mode: t save-place-mode: t electric-pair-mode: t desktop-save-mode: t cl-old-struct-compat-mode: t delete-selection-mode: t cua-mode: t tooltip-mode: t global-eldoc-mode: t electric-indent-mode: t mouse-wheel-mode: t file-name-shadow-mode: t global-font-lock-mode: t font-lock-mode: t blink-cursor-mode: t auto-composition-mode: t auto-encryption-mode: t auto-compression-mode: t temp-buffer-resize-mode: t size-indication-mode: t column-number-mode: t line-number-mode: t global-visual-line-mode: t visual-line-mode: t transient-mark-mode: t Load-path shadows: /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-contacts hides ~/.emacs.d/modules/org-contacts /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-habit hides /data/projects/vc/emacs/git/emacs/lisp/org/org-habit /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-python hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-python /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-clojure hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-clojure /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ox-md hides /data/projects/vc/emacs/git/emacs/lisp/org/ox-md /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-macs hides /data/projects/vc/emacs/git/emacs/lisp/org/org-macs /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-groovy hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-groovy /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ox-odt hides /data/projects/vc/emacs/git/emacs/lisp/org/ox-odt /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ox-texinfo hides /data/projects/vc/emacs/git/emacs/lisp/org/ox-texinfo /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-protocol hides /data/projects/vc/emacs/git/emacs/lisp/org/org-protocol /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-io hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-io /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-list hides /data/projects/vc/emacs/git/emacs/lisp/org/org-list /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-scheme hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-scheme /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob hides /data/projects/vc/emacs/git/emacs/lisp/org/ob /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-docview hides /data/projects/vc/emacs/git/emacs/lisp/org/org-docview /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-latex hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-latex /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ox-html hides /data/projects/vc/emacs/git/emacs/lisp/org/ox-html /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-ctags hides /data/projects/vc/emacs/git/emacs/lisp/org/org-ctags /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-src hides /data/projects/vc/emacs/git/emacs/lisp/org/org-src /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-octave hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-octave /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-w3m hides /data/projects/vc/emacs/git/emacs/lisp/org/org-w3m /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-bibtex hides /data/projects/vc/emacs/git/emacs/lisp/org/org-bibtex /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-eww hides /data/projects/vc/emacs/git/emacs/lisp/org/org-eww /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-info hides /data/projects/vc/emacs/git/emacs/lisp/org/org-info /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-processing hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-processing /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ox-beamer hides /data/projects/vc/emacs/git/emacs/lisp/org/ox-beamer /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-maxima hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-maxima /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-table hides /data/projects/vc/emacs/git/emacs/lisp/org/org-table /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-R hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-R /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ox-publish hides /data/projects/vc/emacs/git/emacs/lisp/org/ox-publish /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-mscgen hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-mscgen /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-keys hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-keys /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-css hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-css /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-haskell hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-haskell /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-picolisp hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-picolisp /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-timer hides /data/projects/vc/emacs/git/emacs/lisp/org/org-timer /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-feed hides /data/projects/vc/emacs/git/emacs/lisp/org/org-feed /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-emacs-lisp hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-emacs-lisp /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-coq hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-coq /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-J hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-J /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-mhe hides /data/projects/vc/emacs/git/emacs/lisp/org/org-mhe /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-exp hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-exp /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-rmail hides /data/projects/vc/emacs/git/emacs/lisp/org/org-rmail /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-attach hides /data/projects/vc/emacs/git/emacs/lisp/org/org-attach /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-lilypond hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-lilypond /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-version hides /data/projects/vc/emacs/git/emacs/lisp/org/org-version /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-makefile hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-makefile /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-sql hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-sql /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-lob hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-lob /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-abc hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-abc /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-java hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-java /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-shell hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-shell /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-loaddefs hides /data/projects/vc/emacs/git/emacs/lisp/org/org-loaddefs /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-element hides /data/projects/vc/emacs/git/emacs/lisp/org/org-element /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-ebnf hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-ebnf /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-id hides /data/projects/vc/emacs/git/emacs/lisp/org/org-id /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-crypt hides /data/projects/vc/emacs/git/emacs/lisp/org/org-crypt /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org hides /data/projects/vc/emacs/git/emacs/lisp/org/org /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-plot hides /data/projects/vc/emacs/git/emacs/lisp/org/org-plot /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-ruby hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-ruby /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-matlab hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-matlab /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-lua hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-lua /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-ditaa hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-ditaa /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-irc hides /data/projects/vc/emacs/git/emacs/lisp/org/org-irc /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-gnus hides /data/projects/vc/emacs/git/emacs/lisp/org/org-gnus /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-C hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-C /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-lint hides /data/projects/vc/emacs/git/emacs/lisp/org/org-lint /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-comint hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-comint /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-colview hides /data/projects/vc/emacs/git/emacs/lisp/org/org-colview /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-tangle hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-tangle /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-dot hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-dot /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-mobile hides /data/projects/vc/emacs/git/emacs/lisp/org/org-mobile /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-eshell hides /data/projects/vc/emacs/git/emacs/lisp/org/org-eshell /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-sass hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-sass /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-gnuplot hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-gnuplot /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ox-icalendar hides /data/projects/vc/emacs/git/emacs/lisp/org/ox-icalendar /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ox-man hides /data/projects/vc/emacs/git/emacs/lisp/org/ox-man /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-capture hides /data/projects/vc/emacs/git/emacs/lisp/org/org-capture /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-plantuml hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-plantuml /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-footnote hides /data/projects/vc/emacs/git/emacs/lisp/org/org-footnote /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-sed hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-sed /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-clock hides /data/projects/vc/emacs/git/emacs/lisp/org/org-clock /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-js hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-js /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ox-latex hides /data/projects/vc/emacs/git/emacs/lisp/org/ox-latex /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ox-ascii hides /data/projects/vc/emacs/git/emacs/lisp/org/ox-ascii /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-ref hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-ref /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-stan hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-stan /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-ocaml hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-ocaml /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-agenda hides /data/projects/vc/emacs/git/emacs/lisp/org/org-agenda /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-indent hides /data/projects/vc/emacs/git/emacs/lisp/org/org-indent /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-core hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-core /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-pcomplete hides /data/projects/vc/emacs/git/emacs/lisp/org/org-pcomplete /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-datetree hides /data/projects/vc/emacs/git/emacs/lisp/org/org-datetree /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-ledger hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-ledger /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-shen hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-shen /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-entities hides /data/projects/vc/emacs/git/emacs/lisp/org/org-entities /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-macro hides /data/projects/vc/emacs/git/emacs/lisp/org/org-macro /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-forth hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-forth /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-mouse hides /data/projects/vc/emacs/git/emacs/lisp/org/org-mouse /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-sqlite hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-sqlite /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ox-org hides /data/projects/vc/emacs/git/emacs/lisp/org/ox-org /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-screen hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-screen /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-asymptote hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-asymptote /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-eval hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-eval /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-archive hides /data/projects/vc/emacs/git/emacs/lisp/org/org-archive /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ox hides /data/projects/vc/emacs/git/emacs/lisp/org/ox /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-org hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-org /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-perl hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-perl /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-faces hides /data/projects/vc/emacs/git/emacs/lisp/org/org-faces /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-bbdb hides /data/projects/vc/emacs/git/emacs/lisp/org/org-bbdb /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-compat hides /data/projects/vc/emacs/git/emacs/lisp/org/org-compat /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-lisp hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-lisp /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-install hides /data/projects/vc/emacs/git/emacs/lisp/org/org-install /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-awk hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-awk /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-calc hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-calc /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/org-inlinetask hides /data/projects/vc/emacs/git/emacs/lisp/org/org-inlinetask /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-table hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-table /home/nlj/.emacs.d/elpa/org-plus-contrib-20170917/ob-fortran hides /data/projects/vc/emacs/git/emacs/lisp/org/ob-fortran Features: (mailalias smtpmail shadow bbdb-message emacsbug sendmail eieio-opt speedbar sb-image ezimage dframe help-fns radix-tree smiley gnus-cite gnus-async gnus-bcklg qp mail-extr gnus-ml disp-table hl-line mm-archive url-http url-gw url-cache url-auth nnrss mm-url url url-proxy url-privacy url-expand url-methods url-history url-cookie url-domsuf url-util nndraft nnmh utf-7 server pinentry epa-file network-stream nsm starttls nnfolder bbdb-gnus bbdb-mua nnnil gnus-agent gnus-srvr gnus-score score-mode nnvirtual gnus-msg nntp gnus-cache cl-extra help-mode plain-tex ox-koma-letter ox-odt rng-loc rng-uri rng-parse rng-match rng-dt rng-util rng-pttrn nxml-parse nxml-ns nxml-enc xmltok nxml-util ox-icalendar ox-html table ox-beamer ox-latex ox-ascii ox-publish ox latexenc preview prv-emacs font-latex tex-mode sh-script smie executable csv-mode sort make-mode tex-buf latex tex-ispell tex-style tex-info tex dbus xml texinfo view vc-git diff-mode map flyspell ispell pdf-occur ibuf-ext ibuffer ibuffer-loaddefs tablist tablist-filter semantic/wisent/comp semantic/wisent semantic/wisent/wisent semantic/util-modes semantic/util semantic semantic/tag semantic/lex semantic/fw mode-local cedet pdf-isearch let-alist pdf-misc imenu pdf-tools compile cus-edit pdf-view bookmark pp pdf-cache pdf-info tq pdf-util org-contacts org-capture gnus-art mm-uu mml2015 mm-view mml-smime smime dig mailcap gnus-sum gnus-group gnus-undo gnus-start gnus-cloud nnimap nnmail mail-source tls gnutls utf7 netrc nnoo parse-time gnus-spec gnus-int gnus-range message subr-x puny rfc822 mml mml-sec epa derived epg mm-decode mm-bodies mm-encode mail-parse rfc2231 gmm-utils mailheader gnus-win gnus nnheader org-duration org-eldoc org-w3m org-rmail org-mhe org-irc org-info org-habit org-gnus gnus-util rmail rmail-loaddefs rfc2047 rfc2045 ietf-drums mm-util mail-prsvr mail-utils org-docview doc-view jka-compr image-mode dired-x dired dired-loaddefs org-bibtex bibtex org-bbdb org-agenda org-element avl-tree generator org advice org-macro org-footnote org-pcomplete org-list org-faces org-entities noutline outline easy-mmode org-version ob-shell shell pcomplete ob-R ob-python ob-plantuml ob-org ob-gnuplot ob-ditaa ob-calc calc-store calc-trail calc-ext calc calc-loaddefs calc-macs ob-awk ob-dot ob-maxima ob-latex ob-emacs-lisp ob ob-tangle org-src ob-ref ob-lob ob-table ob-keys ob-exp ob-comint comint ansi-color ring ob-core ob-eval org-compat org-macs org-loaddefs format-spec find-func bbdb-anniv diary-lib diary-loaddefs cal-menu calendar cal-loaddefs bbdb-com crm mailabbrev bbdb bbdb-site timezone bbdb-loaddefs finder-inf tex-site info package epg-config url-handlers url-parse auth-source cl-seq eieio eieio-core cl-macs eieio-loaddefs password-cache url-vars ido seq byte-opt gv bytecomp byte-compile cconv edmacro kmacro recentf tree-widget wid-edit easymenu battery time wheatgrass-theme paren savehist saveplace elec-pair desktop frameset cl-loaddefs cl-lib delsel cua-base cus-start cus-load time-date mule-util tooltip eldoc electric uniquify ediff-hook vc-hooks lisp-float-type mwheel term/x-win x-win term/common-win x-dnd tool-bar dnd fontset image regexp-opt fringe tabulated-list replace newcomment text-mode elisp-mode lisp-mode prog-mode register page menu-bar rfn-eshadow isearch timer select scroll-bar mouse jit-lock font-lock syntax facemenu font-core term/tty-colors frame cl-generic cham georgian utf-8-lang misc-lang vietnamese tibetan thai tai-viet lao korean japanese eucjp-ms cp51932 hebrew greek romanian slovak czech european ethiopic indian cyrillic chinese composite charscript charprop case-table epa-hook jka-cmpr-hook help simple abbrev obarray minibuffer cl-preloaded nadvice loaddefs button faces cus-face macroexp files text-properties overlay sha1 md5 base64 format env code-pages mule custom widget hashtable-print-readable backquote dbusbind inotify lcms2 dynamic-setting system-font-setting font-render-setting move-toolbar gtk x-toolkit x multi-tty make-network-process emacs) Memory information: ((conses 16 689215 96669) (symbols 48 110300 3) (miscs 40 23503 3850) (strings 32 205188 8309) (string-bytes 1 6888177) (vectors 16 58257) (vector-slots 8 1051566 26908) (floats 8 519 825) (intervals 56 30691 0) (buffers 992 109)) From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Resent-From: John Wiegley Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Mon, 25 Sep 2017 15:23:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: nljlistbox2@gmail.com (N. Jackson) Cc: Eli Zaretskii , 28597@debbugs.gnu.org, Richard Stallman Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.150635292428943 (code B ref 28597); Mon, 25 Sep 2017 15:23:01 +0000 Received: (at 28597) by debbugs.gnu.org; 25 Sep 2017 15:22:04 +0000 Received: from localhost ([127.0.0.1]:58644 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dwVCt-0007Wk-V7 for submit@debbugs.gnu.org; Mon, 25 Sep 2017 11:22:04 -0400 Received: from mail-pg0-f51.google.com ([74.125.83.51]:45441) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dwVCs-0007WH-FT for 28597@debbugs.gnu.org; Mon, 25 Sep 2017 11:22:02 -0400 Received: by mail-pg0-f51.google.com with SMTP id 188so4149234pgb.2 for <28597@debbugs.gnu.org>; Mon, 25 Sep 2017 08:22:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:in-reply-to:date:message-id:references :user-agent:mime-version; bh=TbczxHXCbFrLswv3zNlCzPSam9gbYKFGN6s2BhVS89M=; b=UfSoNnjZvJSlYhqfAkINCrxcLwVdRCk1Y+0uelXml9jZOBk/Rr6WCC4xR9lOk50FYQ tWUoYQUdPE00M5Ll+SX7LNGNE1vXUOD2wRKh3wYQEmRz2/ddJ+zFJ4YtMF+cXCIuRvub iOv22UDyP8pfi/4cunodebtr2H20J1Y1yPXAi5kNYmY8JLD/uC52gFNIGunpAQ6CVaT1 +dQUNUH7FmknFuLYbULTrnv8T58xoQEeLSMUce4ax8BaFVyVFlLHxubaxDqbkYU4g8Ti O7hszpXzxVMG/I2aVYR/7cmcPa6z++bG7dP8LTjNp4Gbo2z5i8ejFtVXyK+hlOj4It1q IUxQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:in-reply-to:date:message-id :references:user-agent:mime-version; bh=TbczxHXCbFrLswv3zNlCzPSam9gbYKFGN6s2BhVS89M=; b=P1hfUJJwDyLKrVA6Ajyiwynq6yqG/7b5C+kPh8I4ClSlkL5vrbAaJounpyGXGnxMe8 DzXkVux6Gky8HYW8bbdy1IMm2T2JUU5XFwVpTmG0ZHHAjp3aIxVfF5Vr3Y1YnUABq4+k m9CvO7OiHmrbf1nuMVXaA5i84HKuh83khpFsbIJjr/AIGGuNrBY+XxtlvmvQom94RmyR HeFlpxu+CYmJAKt8dJvSiPaISTF46YmQI/S3tMokJ3LJJkAFmi9+ZBCWuZubhr8Ywo1S MmxqzJ7ighlBLQhm3hM9paihmoOYsroX4tvdW5KyRr/lEWlBNxyJ6B7e+Iikis4H/Br6 23lg== X-Gm-Message-State: AHPjjUjTbIt/lU1rw10KL4hd+htrjMxp8s1HN2sz8JfuNVwW57xKLAqt 3vh94r9gKI0K3uuEOJrYJUjDIYVG X-Google-Smtp-Source: AOwi7QDm+rf7IFdAcb+KQaehtr1HyoqPpWb4jY0s6UdzfeZYqJfB0AmP9SwTiludN+Vln676BRJTwQ== X-Received: by 10.84.236.78 with SMTP id h14mr7747054pln.2.1506352915834; Mon, 25 Sep 2017 08:21:55 -0700 (PDT) Received: from Vulcan.local (76-234-69-149.lightspeed.frokca.sbcglobal.net. [76.234.69.149]) by smtp.gmail.com with ESMTPSA id y63sm11716420pgd.20.2017.09.25.08.21.54 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 25 Sep 2017 08:21:55 -0700 (PDT) From: John Wiegley X-Google-Original-From: "John Wiegley" Received: by Vulcan.local (Postfix, from userid 501) id 6C49390703EE; Mon, 25 Sep 2017 08:21:54 -0700 (PDT) In-Reply-To: <87fubaq0dl.fsf@moondust.localdomain> (N. Jackson's message of "Mon, 25 Sep 2017 11:11:18 -0400") Date: Mon, 25 Sep 2017 08:21:40 -0700 Message-ID: References: <87fubaq0dl.fsf@moondust.localdomain> User-Agent: Gnus/5.130016 (Ma Gnus v0.16) Emacs/26.0 (darwin) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.0 (/) >>>>> "NJ" == N Jackson writes: NJ> Configure issues the following warning: NJ> configure: WARNING: This configuration installs a 'movemail' program NJ> that retrieves POP3 email via only insecure channels. NJ> To omit insecure POP3, you can use './configure --without-pop'. NJ> If the warning is true, then --without-pop should be the default, and NJ> users should have to explicitly request an insecure Emacs with --with-pop. You are requesting a change in behavior that is exceedingly old, so I would like to hear from others what they think about making a change like this. Given how much less of a thing POP is becoming over the years, I'd be in favor of changing the default here. -- John Wiegley GPG fingerprint = 4710 CF98 AF9B 327B B80F http://newartisans.com 60E1 46C4 BD1A 7AC1 4BA2 From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Resent-From: Robert Pluim Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 26 Sep 2017 09:14:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: John Wiegley Cc: "N. Jackson" , 28597@debbugs.gnu.org, Richard Stallman Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.150641722923292 (code B ref 28597); Tue, 26 Sep 2017 09:14:02 +0000 Received: (at 28597) by debbugs.gnu.org; 26 Sep 2017 09:13:49 +0000 Received: from localhost ([127.0.0.1]:59684 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dwlw5-00063c-Ij for submit@debbugs.gnu.org; Tue, 26 Sep 2017 05:13:49 -0400 Received: from mail-wm0-f52.google.com ([74.125.82.52]:46715) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dwlw4-00063P-Eb for 28597@debbugs.gnu.org; Tue, 26 Sep 2017 05:13:48 -0400 Received: by mail-wm0-f52.google.com with SMTP id m72so5535145wmc.1 for <28597@debbugs.gnu.org>; Tue, 26 Sep 2017 02:13:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:references:gmane-reply-to-list:date:in-reply-to :message-id:user-agent:mime-version; bh=614hwFFugqdLhrn3Gsx7C1hxOcYW1lGPLAwdh0v7pWs=; b=YaJdzq3F6QUsKBB5StBRZvTLdDBT8rY3Yvh5lXTFsWJ4yPWFlxtH3pHKjNHdFFlPU5 AH9L3WfE4+uuRxuRpmrvBY4bnKwuFhwPIBYCO6qSHKn6L1Vld13GS4NQvfotLYvzHup5 kj4LvPBnCfa145SCR3uyeg5QH9l/hHEni4+Y+H8I2DSe6RDTHRgq9cOUjeGwIoRE7YKv 3+KJqqVR+gPJjrWyyl3TTO4n+2vb+pDXJTBjcf2ffcgwTISEUQ0LVhO6bOWcqtAgP7KL 8pENe8q6f5+5Cf+IngloAF+ObZrVhukc1GArSerF/n6sxS14/sIolk8radZDLxjT+6QC /d3w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references :gmane-reply-to-list:date:in-reply-to:message-id:user-agent :mime-version; bh=614hwFFugqdLhrn3Gsx7C1hxOcYW1lGPLAwdh0v7pWs=; b=FXIcqh83b4TznDMQ5MHV0cYEOeCnMUMjv6Gm4wfwo+UeC6A8+fpNWDOEoXXs0/Ko6s 6boQTXJ2QPkeEt1n1ZWtKTNCU1c1nhxaIsoMRC9A2QEyLE8P4n0clmnzBsSzE8AfkxMT AuEh5usrI5qYQRGzf1LiZWq/kOAh9SmNxBhbHSjE7Jw9N0NssM4xlvsEp9ya50RB617P MFgwO4PgmcMh7vqdQxxM8hst+JGjU3IWsbNujQ5bWGucxZ4iyXkjc61twrUIEI7zJkWx PwygQam7FKqJ1Iycbjl3Bi7zAq/OSaRFcqV5U2a6OZf0ESJlXGTm7go7F1tgqyMshPku Gdzg== X-Gm-Message-State: AHPjjUjhc3r6bbHrQ/PjAM/Y75qobK9MzJ+JUzVqENMaSFiPr9U/pE25 z2A2GuRn9z5jqXyCTgL+/5Q= X-Google-Smtp-Source: AOwi7QCIjqnNFYje83NN1/1evf9eGehbMSF4gIWHrpubjPTZJ3zMaaYiuRBvX1Dn3w2YeUcF0ifSjg== X-Received: by 10.80.167.37 with SMTP id h34mr5713456edc.223.1506417222722; Tue, 26 Sep 2017 02:13:42 -0700 (PDT) Received: from rpluim-ubuntu ([149.5.228.1]) by smtp.gmail.com with ESMTPSA id d21sm5434401edb.4.2017.09.26.02.13.41 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 26 Sep 2017 02:13:41 -0700 (PDT) From: Robert Pluim References: <87fubaq0dl.fsf@moondust.localdomain> Gmane-Reply-To-List: yes Date: Tue, 26 Sep 2017 11:13:38 +0200 In-Reply-To: (John Wiegley's message of "Mon, 25 Sep 2017 08:21:40 -0700") Message-ID: <87bmlx4ybh.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.60 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.5 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.5 (/) John Wiegley writes: >>>>>> "NJ" == N Jackson writes: > > NJ> Configure issues the following warning: > NJ> configure: WARNING: This configuration installs a 'movemail' program > NJ> that retrieves POP3 email via only insecure channels. > NJ> To omit insecure POP3, you can use './configure --without-pop'. > > NJ> If the warning is true, then --without-pop should be the default, and > NJ> users should have to explicitly request an insecure Emacs with --with-pop. > > You are requesting a change in behavior that is exceedingly old, so I would > like to hear from others what they think about making a change like this. > Given how much less of a thing POP is becoming over the years, I'd be in favor > of changing the default here. I'm sure there are still people stuck with using POP3, but they should be gently incited to move to POP3S or IMAPS the same way people should be steered away from http and TLS < 1.2. Making the default be --without-pop is one way to do that. Regards Robert From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Resent-From: Glenn Morris Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 26 Sep 2017 15:40:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: nljlistbox2@gmail.com (N. Jackson) Cc: 28597@debbugs.gnu.org Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.150644037923367 (code B ref 28597); Tue, 26 Sep 2017 15:40:02 +0000 Received: (at 28597) by debbugs.gnu.org; 26 Sep 2017 15:39:39 +0000 Received: from localhost ([127.0.0.1]:33366 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dwrxT-00064o-3r for submit@debbugs.gnu.org; Tue, 26 Sep 2017 11:39:39 -0400 Received: from eggs.gnu.org ([208.118.235.92]:39377) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dwrxR-00064b-IR for 28597@debbugs.gnu.org; Tue, 26 Sep 2017 11:39:37 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dwrxL-0007wu-Kl for 28597@debbugs.gnu.org; Tue, 26 Sep 2017 11:39:32 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:33551) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dwrxI-0007vI-88; Tue, 26 Sep 2017 11:39:28 -0400 Received: from rgm by fencepost.gnu.org with local (Exim 4.82) (envelope-from ) id 1dwrxG-0003iC-5z; Tue, 26 Sep 2017 11:39:26 -0400 From: Glenn Morris References: <87fubaq0dl.fsf@moondust.localdomain> X-Spook: AVN constitution Subway FBI NORAD Michoacna Norvo Virus X-Ran: VONt"bbFrdI}C.?!n''5<+m;jIQy^:$39\9aYlS7e'o}(QJ'}[UJZuWeaeF$ X-Hue: cyan X-Attribution: GM Date: Tue, 26 Sep 2017 11:39:26 -0400 In-Reply-To: <87fubaq0dl.fsf@moondust.localdomain> (N. Jackson's message of "Mon, 25 Sep 2017 11:11:18 -0400") Message-ID: User-Agent: Gnus (www.gnus.org), GNU Emacs (www.gnu.org/software/emacs/) MIME-Version: 1.0 Content-Type: text/plain X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -5.0 (-----) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) See previous discussion in https://debbugs.gnu.org/26102 From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default References: <87fubaq0dl.fsf@moondust.localdomain> In-Reply-To: <87fubaq0dl.fsf@moondust.localdomain> Resent-From: Paul Eggert Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 26 Sep 2017 17:23:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: John Wiegley Cc: "N. Jackson" , 28597@debbugs.gnu.org Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.15064465357758 (code B ref 28597); Tue, 26 Sep 2017 17:23:02 +0000 Received: (at 28597) by debbugs.gnu.org; 26 Sep 2017 17:22:15 +0000 Received: from localhost ([127.0.0.1]:33502 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dwtYl-000214-An for submit@debbugs.gnu.org; Tue, 26 Sep 2017 13:22:15 -0400 Received: from zimbra.cs.ucla.edu ([131.179.128.68]:39558) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dwtYi-00020p-SI for 28597@debbugs.gnu.org; Tue, 26 Sep 2017 13:22:13 -0400 Received: from localhost (localhost [127.0.0.1]) by zimbra.cs.ucla.edu (Postfix) with ESMTP id B243F160AEB; Tue, 26 Sep 2017 10:22:05 -0700 (PDT) Received: from zimbra.cs.ucla.edu ([127.0.0.1]) by localhost (zimbra.cs.ucla.edu [127.0.0.1]) (amavisd-new, port 10032) with ESMTP id SVFvAg7cE4B1; Tue, 26 Sep 2017 10:22:05 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by zimbra.cs.ucla.edu (Postfix) with ESMTP id F1831160E03; Tue, 26 Sep 2017 10:22:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at zimbra.cs.ucla.edu Received: from zimbra.cs.ucla.edu ([127.0.0.1]) by localhost (zimbra.cs.ucla.edu [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id AVcSfY4nN41S; Tue, 26 Sep 2017 10:22:04 -0700 (PDT) Received: from Penguin.CS.UCLA.EDU (Penguin.CS.UCLA.EDU [131.179.64.200]) by zimbra.cs.ucla.edu (Postfix) with ESMTPSA id D8544160AEB; Tue, 26 Sep 2017 10:22:04 -0700 (PDT) From: Paul Eggert Organization: UCLA Computer Science Department Message-ID: Date: Tue, 26 Sep 2017 10:22:04 -0700 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.3.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-US X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) As Glenn noted, the 'configure' message N. mentions came from an uneasy compromise between worry about the default lack-of-security in Emacs, and worry about backward compatibility (see Bug#26102). Although I favor making --without-pop the default, at this point it's really an issue for the two maintainers to decide. From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Resent-From: John Wiegley Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 26 Sep 2017 18:55:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Paul Eggert Cc: "N. Jackson" , 28597@debbugs.gnu.org Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.150645209723628 (code B ref 28597); Tue, 26 Sep 2017 18:55:02 +0000 Received: (at 28597) by debbugs.gnu.org; 26 Sep 2017 18:54:57 +0000 Received: from localhost ([127.0.0.1]:33598 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dwv0S-000692-P8 for submit@debbugs.gnu.org; Tue, 26 Sep 2017 14:54:56 -0400 Received: from mail-pf0-f180.google.com ([209.85.192.180]:45092) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dwv0R-00068q-G5 for 28597@debbugs.gnu.org; Tue, 26 Sep 2017 14:54:55 -0400 Received: by mail-pf0-f180.google.com with SMTP id z84so5983524pfi.2 for <28597@debbugs.gnu.org>; Tue, 26 Sep 2017 11:54:55 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:in-reply-to:date:message-id:references :user-agent:mime-version; bh=6/6QyBw2ENCaKfzrARGg6HKx9YBbw4jwgIGd0r0G+LA=; b=laSjGGXI26L+ytO/WsJoLi4Ts2GULbph+/v940AGGHSilgXx+NOk1NfGFXZjeonj7H H2SRt3VuTIb8Ev72s4F90onJYK9496HMHUV5AJELcfRN4cd4oNNj+IwjA8H7pGd8orkE WFfc9hyTieCtury0FuiKcUQGJ11pq7jQGsrAhZVCs+FLyIxIzq7OMnAolcLyAei/Tdkl LP1b69mYjE8TbWV+1K/62hMUKX8FqzznkPoD/QjwJI+tDve4vtDZ/9ermbdbQgw4oI1y qFuHfCiTJcAoo4homOlKT22WL0wQxM6XahoK3X7om1OQxOOM/18PWTTxt9oHo7oXphD7 k9CQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:in-reply-to:date:message-id :references:user-agent:mime-version; bh=6/6QyBw2ENCaKfzrARGg6HKx9YBbw4jwgIGd0r0G+LA=; b=czWdesV2phN+zpXVOlrdgGD225533p8MCUEPwQW5dnyr1qexkbG0L9ysuH2AlfSfTi w2FiMnhR8KaoliCmquTeWxChNUbeZwUyN/a12bNMIJgpCUyIZy09PGow3oDZqu9+qORs WBWrddn5dCmNI1M6ACqSkhY3wWeSJgVftIObKhFzVzQeFdRKAaVYoISE/RLnZltlvp5q aegO7EsiO5zVW90acRjRsVmBeTrU0T8OW/fmx0qmeKyTefrlI0JsgQPrsPt+9B9bJbLu vl4KjDevqKKlzxThBDXPOEQdoIXzThWNj1W8/QsL5RZ9bqGZDE/Z2kVD0id3olAqMFR5 T0pA== X-Gm-Message-State: AHPjjUjZV4UZp48PyZpqGf3fXHrbx9908cUX88rJczTkeUIftmDDam5E M9pdvsMjj5dq+P1Z2w3HnL8= X-Google-Smtp-Source: AOwi7QDsDrFyfDLYYF7pTIm7xrZiW+cflJjfC3bQcX0isNLFkwiqkivYr4ZlRukcHiGUqAqkyCaoNQ== X-Received: by 10.84.229.6 with SMTP id b6mr11481514plk.401.1506452089401; Tue, 26 Sep 2017 11:54:49 -0700 (PDT) Received: from Vulcan.local (76-234-69-149.lightspeed.frokca.sbcglobal.net. [76.234.69.149]) by smtp.gmail.com with ESMTPSA id r11sm17910444pfg.180.2017.09.26.11.54.47 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 26 Sep 2017 11:54:48 -0700 (PDT) From: John Wiegley X-Google-Original-From: "John Wiegley" Received: by Vulcan.local (Postfix, from userid 501) id 26889927D064; Tue, 26 Sep 2017 11:54:47 -0700 (PDT) In-Reply-To: (Paul Eggert's message of "Tue, 26 Sep 2017 10:22:04 -0700") Date: Tue, 26 Sep 2017 11:51:59 -0700 Message-ID: References: User-Agent: Gnus/5.130016 (Ma Gnus v0.16) Emacs/26.0 (darwin) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) >>>>> Paul Eggert writes: > As Glenn noted, the 'configure' message N. mentions came from an uneasy > compromise between worry about the default lack-of-security in Emacs, and > worry about backward compatibility (see Bug#26102). Although I favor making > --without-pop the default, at this point it's really an issue for the two > maintainers to decide. I'm OK making it the default. Let's wait until Eli's back from his trip and he can add his thoughts. -- John Wiegley GPG fingerprint = 4710 CF98 AF9B 327B B80F http://newartisans.com 60E1 46C4 BD1A 7AC1 4BA2 From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Resent-From: Eli Zaretskii Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Fri, 29 Sep 2017 13:15:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: John Wiegley Cc: nljlistbox2@gmail.com, eggert@cs.ucla.edu, 28597@debbugs.gnu.org Reply-To: Eli Zaretskii Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.150669086712056 (code B ref 28597); Fri, 29 Sep 2017 13:15:01 +0000 Received: (at 28597) by debbugs.gnu.org; 29 Sep 2017 13:14:27 +0000 Received: from localhost ([127.0.0.1]:37767 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dxv7b-00038O-IY for submit@debbugs.gnu.org; Fri, 29 Sep 2017 09:14:27 -0400 Received: from eggs.gnu.org ([208.118.235.92]:60730) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dxv7Z-000388-FH for 28597@debbugs.gnu.org; Fri, 29 Sep 2017 09:14:25 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dxv7R-0008Tm-3p for 28597@debbugs.gnu.org; Fri, 29 Sep 2017 09:14:20 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-0.0 required=5.0 tests=BAYES_20,RP_MATCHES_RCVD autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:44492) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dxv7R-0008Td-1L; Fri, 29 Sep 2017 09:14:17 -0400 Received: from 84.94.185.246.cable.012.net.il ([84.94.185.246]:1233 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1dxv7P-0002N0-FZ; Fri, 29 Sep 2017 09:14:16 -0400 Date: Fri, 29 Sep 2017 16:14:00 +0300 Message-Id: <837ewh8x5z.fsf@gnu.org> From: Eli Zaretskii In-reply-to: (message from John Wiegley on Tue, 26 Sep 2017 11:51:59 -0700) References: X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -5.0 (-----) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) > From: John Wiegley > Date: Tue, 26 Sep 2017 11:51:59 -0700 > Cc: "N. Jackson" , 28597@debbugs.gnu.org > > >>>>> Paul Eggert writes: > > > As Glenn noted, the 'configure' message N. mentions came from an uneasy > > compromise between worry about the default lack-of-security in Emacs, and > > worry about backward compatibility (see Bug#26102). Although I favor making > > --without-pop the default, at this point it's really an issue for the two > > maintainers to decide. > > I'm OK making it the default. Let's wait until Eli's back from his trip and he > can add his thoughts. I already agreed in http://lists.gnu.org/archive/html/emacs-devel/2017-08/msg00054.html to have --without-pop be the default, and Paul already installed a patch to do that. So I'm confused about this discussion: what exactly is the problem, and what needs to be done/decided? Are we talking about Posix systems where GNU Mailutils are not available? If so, do we want to leave them without movemail at all rather than with one which supports POP3? Or do we want to give them movemail, but without POP3? IOW, from my POV, most of the issues addressed in the cited bug#26102 were resolved as proposed there many moons ago, and I'm unsure what's left, and why is it a problem. From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Resent-From: Robert Pluim Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Fri, 29 Sep 2017 14:06:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Eli Zaretskii Cc: John Wiegley , eggert@cs.ucla.edu, 28597@debbugs.gnu.org, nljlistbox2@gmail.com Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.150669395418755 (code B ref 28597); Fri, 29 Sep 2017 14:06:02 +0000 Received: (at 28597) by debbugs.gnu.org; 29 Sep 2017 14:05:54 +0000 Received: from localhost ([127.0.0.1]:39359 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dxvvO-0004sR-4s for submit@debbugs.gnu.org; Fri, 29 Sep 2017 10:05:54 -0400 Received: from mail-wm0-f41.google.com ([74.125.82.41]:45516) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dxvvM-0004sD-CM for 28597@debbugs.gnu.org; Fri, 29 Sep 2017 10:05:52 -0400 Received: by mail-wm0-f41.google.com with SMTP id q124so245921wmb.0 for <28597@debbugs.gnu.org>; Fri, 29 Sep 2017 07:05:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:references:gmane-reply-to-list:date:in-reply-to :message-id:user-agent:mime-version; bh=k6aOhYpNDwriwaZUP3aB4D7LP57Ub8reZ1F9aA9MCcU=; b=a14hSEt2kQ26EOyuwFJ9iMqi39BvZbFVoKPBpbX+ejhR9UhJVb1Uj9cjscWgKp9FGy Gis7RbqJp/O83bbPKsh0QZuZoo7zKkjdFXr3yMxoDcjlu+eb1cOzDkBVXbfKb6qcRwbQ i55e9oDaxopj7EzKKHtra5/iA+wQkp63Ch5FP60yYA9g8Y0kqZ1DamCkv+ChSoJ46KI1 uKQwO68BU0E/r1EG0EnzFuK5VDZbib4jB4T+sW3x2B3uOs40KDB/VLXx3l77/unV1AJ2 xDe5nk0Ro7oFffzyarxoYU5n789IjbdSMyc9H9KovEfwVDwYBwZHyWPU78RTlFpCIBJy wXHw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references :gmane-reply-to-list:date:in-reply-to:message-id:user-agent :mime-version; bh=k6aOhYpNDwriwaZUP3aB4D7LP57Ub8reZ1F9aA9MCcU=; b=gpqehKaetg4uVgql+9CwLz2bohiZPiE35iVro6m0b8wMJJ96HOZycnD2+vDb5M6Fte d3PBlyL+kzvNm0bwknLzc+0JwkBAh9hkU87HVvGd9/vPTxmHfSQ0WMqK9lXDQinWmTnR kst4d5j93ZTCbt0w+QINii+A0DX60fHe837c7wb7JPG0ijwLQGqiuUjN9JB3saZZC+Vh kCXXYADVZfu+3guI2yTz1dbMVWUBIaDlRzwo3ebLt1GG9qhNBeeArD+dOo1eVQ+dAIQY iwEt0C/sjyWllmDGqYQ5KStmX1eXPUbhd2TH+m28fbKfAq/7WoLqU+gVHOVrj56Uv9Ys f+Tg== X-Gm-Message-State: AHPjjUiNo7ncWtQV/3hal52X81vNxNlH8lqMZL9lAm2JSREnJL5wPpPk +N7+TqNo1XW8TS+exvkdWVaNd7doifQ= X-Google-Smtp-Source: AOwi7QDUbgD7+HxRUhkdJp4RzEYCogHfc2YHVvSQPf3qyxUAp2UywTIjS2DqYCEjmel2VLB2MhjwnQ== X-Received: by 10.80.177.141 with SMTP id m13mr10128995edd.114.1506693946240; Fri, 29 Sep 2017 07:05:46 -0700 (PDT) Received: from rpluim-ubuntu ([149.5.228.1]) by smtp.gmail.com with ESMTPSA id i16sm3877632edj.77.2017.09.29.07.05.44 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 29 Sep 2017 07:05:45 -0700 (PDT) From: Robert Pluim References: <837ewh8x5z.fsf@gnu.org> Gmane-Reply-To-List: yes Date: Fri, 29 Sep 2017 16:05:42 +0200 In-Reply-To: <837ewh8x5z.fsf@gnu.org> (Eli Zaretskii's message of "Fri, 29 Sep 2017 16:14:00 +0300") Message-ID: <87r2upd2h5.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.60 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.5 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.5 (/) Eli Zaretskii writes: >> From: John Wiegley >> Date: Tue, 26 Sep 2017 11:51:59 -0700 >> Cc: "N. Jackson" , 28597@debbugs.gnu.org >> >> >>>>> Paul Eggert writes: >> >> > As Glenn noted, the 'configure' message N. mentions came from an uneasy >> > compromise between worry about the default lack-of-security in Emacs, and >> > worry about backward compatibility (see Bug#26102). Although I favor making >> > --without-pop the default, at this point it's really an issue for the two >> > maintainers to decide. >> >> I'm OK making it the default. Let's wait until Eli's back from his trip and he >> can add his thoughts. > > I already agreed in > http://lists.gnu.org/archive/html/emacs-devel/2017-08/msg00054.html to > have --without-pop be the default, and Paul already installed a patch > to do that. So I'm confused about this discussion: what exactly is > the problem, and what needs to be done/decided? Are we talking about > Posix systems where GNU Mailutils are not available? If so, do we > want to leave them without movemail at all rather than with one which > supports POP3? Or do we want to give them movemail, but without POP3? I thought we were discussing making --without-pop be the default even if GNU Mailutils are not available, and it's what I'm advocating. Paul's patch only did that if they were found. If that means that some people need to install GNU Mailutils, which support secure(r) protocols, then I'm all in favour. Robert From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Resent-From: nljlistbox2@gmail.com (N. Jackson) Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Fri, 29 Sep 2017 16:08:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Eli Zaretskii Cc: John Wiegley , eggert@cs.ucla.edu, 28597@debbugs.gnu.org Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.15067012446372 (code B ref 28597); Fri, 29 Sep 2017 16:08:01 +0000 Received: (at 28597) by debbugs.gnu.org; 29 Sep 2017 16:07:24 +0000 Received: from localhost ([127.0.0.1]:39442 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dxxoy-0001ei-D2 for submit@debbugs.gnu.org; Fri, 29 Sep 2017 12:07:24 -0400 Received: from mail-io0-f176.google.com ([209.85.223.176]:51667) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dxxox-0001eW-0p for 28597@debbugs.gnu.org; Fri, 29 Sep 2017 12:07:23 -0400 Received: by mail-io0-f176.google.com with SMTP id l15so211000iol.8 for <28597@debbugs.gnu.org>; Fri, 29 Sep 2017 09:07:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version; bh=maVzb6GBCCwln5hMBSSAimyYqyX5wrt17uAj0SZV5EM=; b=Im2iH1wW3t1pFll8qA3ugy7gUntZDdRT2muU+s81t+qboeZhyjDsU4zXgwmtV+7TCS jYb5+X14TcGnDvEd1+LKebzqAfStzllXm02dSNG3Onxk+jM9LECF1Mk7pPtRrCSm8l33 NhKEY5NhiGCbVmFdhaVisZk6boKj21lIe9Nd+IwmSf/i43cbj8UKkVXtUit4ycrMDXwW nVJ3s+wlQBiAUtpsqIoh3XOtOxQ1gVqkAQ3xD5FQ6vRz6PEkY5Nj/VMivfMa1W9yGsi+ X936FzI3L9JUPc8gEGqgVpQpMypUo5t8i2laVbFJAqtQnzQSDbTyCwd2A96KWOxyD8Vl dTnA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to :message-id:user-agent:mime-version; bh=maVzb6GBCCwln5hMBSSAimyYqyX5wrt17uAj0SZV5EM=; b=n+K9sAFvf365C2XsTsk1ddf1t2JHuHdoEl/xj6GlfSkCGkgcIoHZGlS/i8AM/U2K0B nzNtbKoRoiXqhVVXIuc+G39j5hWO0ZYW+JQF9E9Tt2yigZwM/aDlFdB28eu6IwNr/ogk BaTDuWET+UOWQuMXpFMVvNMd5vJ+r3Pb3wTsfMR0UEMH0pmELg5VvEnDMeJCAkJQPl+6 Xm3qiTcpSVqFIy+YqhSR3mYsSi78/axjAlhsa0mgfd5Ji8XN/1Nw4D/mSw5Gy1QP7eH2 /zUrLiwVETI1tKPVmfKnPYBu4SQi6ueUohXiMRi2WDfmllNhzf/XJC2MHHCIbEEDtYS/ ElBg== X-Gm-Message-State: AMCzsaXlT6xAX0TFL8w09nR1t9d2KishQyGcyd6vTNySJsISrizNf1Ns CbCBYG4uSRtL2/i6R4+APDj39w== X-Google-Smtp-Source: AOwi7QCi/DuJyOP6m/9ILw09u2MQ+e4OT4j+vxT325okdVU2o8KdPZDuwJFf53lmftixunP5zGvgQA== X-Received: by 10.107.97.5 with SMTP id v5mr1896407iob.174.1506701237121; Fri, 29 Sep 2017 09:07:17 -0700 (PDT) Received: from moondust.localdomain.nodomain.none ([72.143.113.194]) by smtp.gmail.com with ESMTPSA id i15sm1848841iod.18.2017.09.29.09.07.15 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Fri, 29 Sep 2017 09:07:16 -0700 (PDT) From: nljlistbox2@gmail.com (N. Jackson) References: <837ewh8x5z.fsf@gnu.org> Date: Fri, 29 Sep 2017 12:07:14 -0400 In-Reply-To: <837ewh8x5z.fsf@gnu.org> (Eli Zaretskii's message of "Fri, 29 Sep 2017 16:14:00 +0300") Message-ID: <87ing17akt.fsf@moondust.localdomain> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.60 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -2.0 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.0 (--) At 16:14 +0300 on Friday 2017-09-29, Eli Zaretskii wrote: > >> >>>>> Paul Eggert writes: >> >> > As Glenn noted, the 'configure' message N. mentions came from >> > an uneasy compromise between worry about the default >> > lack-of-security in Emacs, and worry about backward >> > compatibility (see Bug#26102). Although I favor making >> > --without-pop the default, at this point it's really an issue >> > for the two maintainers to decide. > > I already agreed in > http://lists.gnu.org/archive/html/emacs-devel/2017-08/msg00054.html > to have --without-pop be the default, and Paul already installed > a patch to do that. And yet --without-pop does not appear to be the default here on the emacs-26 branch. I updated a few minutes ago (commit 61225964edbaa01e49a6e776af00502ab31767b5), and running configure writes the following to stderr: configure: WARNING: Your version of Gtk+ will have problems with closing open displays. This is no problem if you just use one display, but if you use more than one and close one of them Emacs may crash. See http://bugzilla.gnome.org/show_bug.cgi?id=85715 configure: WARNING: This configuration installs a 'movemail' program that retrieves POP3 email via only insecure channels. To omit insecure POP3, you can use './configure --without-pop'. > So I'm confused about this discussion: what exactly is the > problem, and what needs to be done/decided? The problem is that --without-pop is not the default, or at least that it appears that it is not the default. The general agreement seems to be that it should be the default. N. From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Resent-From: Eli Zaretskii Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Fri, 29 Sep 2017 17:43:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Robert Pluim Cc: jwiegley@gmail.com, eggert@cs.ucla.edu, 28597@debbugs.gnu.org, nljlistbox2@gmail.com Reply-To: Eli Zaretskii Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.150670696223446 (code B ref 28597); Fri, 29 Sep 2017 17:43:01 +0000 Received: (at 28597) by debbugs.gnu.org; 29 Sep 2017 17:42:42 +0000 Received: from localhost ([127.0.0.1]:39543 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dxzJC-000666-D3 for submit@debbugs.gnu.org; Fri, 29 Sep 2017 13:42:42 -0400 Received: from eggs.gnu.org ([208.118.235.92]:42351) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dxzJB-00065p-3v for 28597@debbugs.gnu.org; Fri, 29 Sep 2017 13:42:41 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dxzJ2-0000MA-Qq for 28597@debbugs.gnu.org; Fri, 29 Sep 2017 13:42:35 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:50067) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dxzJ2-0000M4-Mg; Fri, 29 Sep 2017 13:42:32 -0400 Received: from 84.94.185.246.cable.012.net.il ([84.94.185.246]:1391 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1dxzJ2-0001Oe-6U; Fri, 29 Sep 2017 13:42:32 -0400 Date: Fri, 29 Sep 2017 20:42:25 +0300 Message-Id: <83a81d7666.fsf@gnu.org> From: Eli Zaretskii In-reply-to: <87r2upd2h5.fsf@gmail.com> (message from Robert Pluim on Fri, 29 Sep 2017 16:05:42 +0200) References: <837ewh8x5z.fsf@gnu.org> <87r2upd2h5.fsf@gmail.com> X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -5.0 (-----) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) > From: Robert Pluim > Cc: John Wiegley , nljlistbox2@gmail.com, eggert@cs.ucla.edu, 28597@debbugs.gnu.org > Date: Fri, 29 Sep 2017 16:05:42 +0200 > > I thought we were discussing making --without-pop be the default even > if GNU Mailutils are not available, and it's what I'm > advocating. Paul's patch only did that if they were found. If that's what people want, fine with me on Posix platforms, but not on MS-Windows (where Mailutils are not available, and probably never will be). > If that means that some people need to install GNU Mailutils, which > support secure(r) protocols, then I'm all in favour. But the effect of encouraging the installation of Mailutils will only be achieved if the configure script displays something about that. AFIU, the proposal was to make --without-pop the default and not display any message, in which case people just get movemail without POP3, and we might be silently breaking someone's setup. Do we want that? From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Resent-From: Eli Zaretskii Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Fri, 29 Sep 2017 17:54:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: nljlistbox2@gmail.com (N. Jackson) Cc: jwiegley@gmail.com, eggert@cs.ucla.edu, 28597@debbugs.gnu.org Reply-To: Eli Zaretskii Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.150670761024555 (code B ref 28597); Fri, 29 Sep 2017 17:54:02 +0000 Received: (at 28597) by debbugs.gnu.org; 29 Sep 2017 17:53:30 +0000 Received: from localhost ([127.0.0.1]:39560 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dxzTe-0006Nz-Cz for submit@debbugs.gnu.org; Fri, 29 Sep 2017 13:53:30 -0400 Received: from eggs.gnu.org ([208.118.235.92]:45088) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dxzTc-0006Nm-R8 for 28597@debbugs.gnu.org; Fri, 29 Sep 2017 13:53:29 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dxzTU-00080u-NM for 28597@debbugs.gnu.org; Fri, 29 Sep 2017 13:53:23 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:50241) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dxzTU-00080p-Jc; Fri, 29 Sep 2017 13:53:20 -0400 Received: from 84.94.185.246.cable.012.net.il ([84.94.185.246]:1401 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1dxzTU-00024X-30; Fri, 29 Sep 2017 13:53:20 -0400 Date: Fri, 29 Sep 2017 20:53:13 +0300 Message-Id: <834lrl75o6.fsf@gnu.org> From: Eli Zaretskii In-reply-to: <87ing17akt.fsf@moondust.localdomain> (nljlistbox2@gmail.com) References: <837ewh8x5z.fsf@gnu.org> <87ing17akt.fsf@moondust.localdomain> X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -5.0 (-----) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) > From: nljlistbox2@gmail.com (N. Jackson) > Cc: John Wiegley , eggert@cs.ucla.edu, 28597@debbugs.gnu.org > Date: Fri, 29 Sep 2017 12:07:14 -0400 > > > I already agreed in > > http://lists.gnu.org/archive/html/emacs-devel/2017-08/msg00054.html > > to have --without-pop be the default, and Paul already installed > > a patch to do that. > > And yet --without-pop does not appear to be the default here on the > emacs-26 branch. Do you have Mailutils installed? That default is activated only if you do. From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Resent-From: nljlistbox2@gmail.com (N. Jackson) Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Fri, 29 Sep 2017 18:15:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Eli Zaretskii Cc: jwiegley@gmail.com, eggert@cs.ucla.edu, 28597@debbugs.gnu.org Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.150670887826620 (code B ref 28597); Fri, 29 Sep 2017 18:15:02 +0000 Received: (at 28597) by debbugs.gnu.org; 29 Sep 2017 18:14:38 +0000 Received: from localhost ([127.0.0.1]:39573 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dxzo6-0006vI-IT for submit@debbugs.gnu.org; Fri, 29 Sep 2017 14:14:38 -0400 Received: from mail-it0-f47.google.com ([209.85.214.47]:44230) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dxzo5-0006v4-1V for 28597@debbugs.gnu.org; Fri, 29 Sep 2017 14:14:37 -0400 Received: by mail-it0-f47.google.com with SMTP id d192so728222itd.1 for <28597@debbugs.gnu.org>; Fri, 29 Sep 2017 11:14:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version; bh=pHvMAju3e8WQL3BkQoAojKHhNuDIVTAQKQmdsXj437w=; b=Cyszo1QgrNizvzfll2EWI1vZ5DHdUMhmjlfymdIdQUebJEM9LVlpAJPmF9jz0V1qPd y1iVhSfcgxgldUC62vF4N2j1wQch5UbByXKlv8FoEGVBiBPYjpj7t1I4xoiuKDrZ+zoV lhQiG0mvPPTkq5oF+Ad2qNP3fXPh5LWyIydKUzu98K6b3S0R9DjDOWO6IRxIreC6REIW zA4f/9NGy0XK7Ssk1oDSrsOTsbzYWMBFa7Po4b/ggQWfnDVO+Ck91bdH36kKHOhRVFlA 1OrWJXvxRMSkDek+kH+jECOQxkPgql8kAxtyk8R4nJD8jBdhskc9FSW3qPCva7uVQyDd w+Uw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to :message-id:user-agent:mime-version; bh=pHvMAju3e8WQL3BkQoAojKHhNuDIVTAQKQmdsXj437w=; b=Uu7FUQRRu2gdNTeNZB8ygrrNuWztvzbD6vB5ds6mCaJhtm3YWDBH09x4enLUckNDMe AxYDmIidosRB6A6vcM7In6jSULM7eHXOkYj8x0FP4zPvjlyDX/fSxgKYUXuJ9EeRmdTI plAZUjZNXyKFt0uNwxMoWLvi6n8u39jgsYwivXiEv8FzLcU5TXaTQqRGu3fWNuFsMAgY 2Xd3tjud0Ofce3zn9x68QsryEMMYY6Y/RoKDz3gISuxC2oFKuRuj3te4cbVbmr/upUXj RzFe4d317chZI40SNsM+4xUHsjmzwlt4q0st1IXiwPDyLOgzWyTOxMKCukjiyMUQE23G dCFg== X-Gm-Message-State: AMCzsaWrHITp36IRcwxI7Zs+sMI/aHsWjBV/6EwwByH8r7a1G2sM2p3S /B5w6V5+CAiAakOmuCxg3Maq3w== X-Google-Smtp-Source: AOwi7QB6QlSDPe/gnLz2mEmVcZFtyLgeLb2eOrqgJ8D0nj7w+maaCE9iAi8VmbXpBVEE6fG9oUjzag== X-Received: by 10.36.74.9 with SMTP id k9mr8872063itb.145.1506708871163; Fri, 29 Sep 2017 11:14:31 -0700 (PDT) Received: from moondust.localdomain.nodomain.none ([72.143.113.194]) by smtp.gmail.com with ESMTPSA id u66sm1894769iod.78.2017.09.29.11.14.29 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Fri, 29 Sep 2017 11:14:30 -0700 (PDT) From: nljlistbox2@gmail.com (N. Jackson) References: <837ewh8x5z.fsf@gnu.org> <87ing17akt.fsf@moondust.localdomain> <834lrl75o6.fsf@gnu.org> Date: Fri, 29 Sep 2017 14:14:29 -0400 In-Reply-To: <834lrl75o6.fsf@gnu.org> (Eli Zaretskii's message of "Fri, 29 Sep 2017 20:53:13 +0300") Message-ID: <877ewh74oq.fsf@moondust.localdomain> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.60 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.7 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.7 (/) At 20:53 +0300 on Friday 2017-09-29, Eli Zaretskii wrote: > > Do you have Mailutils installed? No, I don't. (Sadly it is unavailable from the Fedora repositories and I have never had a reason to build it myself.) [I have a local IMAP server and I retrieve my mail into it variously with fetchmail and getmail, so I never use pop in Emacs.] > That default is activated only if you do. I see. I don't think that makes sense, does it? There's nothing terribly odd about my system and if the warning message from config is true, then _by default_ I'm going to get built an insecure Emacs. I think that --without-pop should be the default. Unconditionally. N. From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Resent-From: Eli Zaretskii Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Fri, 29 Sep 2017 19:13:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: nljlistbox2@gmail.com (N. Jackson) Cc: jwiegley@gmail.com, eggert@cs.ucla.edu, 28597@debbugs.gnu.org Reply-To: Eli Zaretskii Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.150671232332394 (code B ref 28597); Fri, 29 Sep 2017 19:13:02 +0000 Received: (at 28597) by debbugs.gnu.org; 29 Sep 2017 19:12:03 +0000 Received: from localhost ([127.0.0.1]:39623 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dy0he-0008QP-N0 for submit@debbugs.gnu.org; Fri, 29 Sep 2017 15:12:02 -0400 Received: from eggs.gnu.org ([208.118.235.92]:34895) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dy0hc-0008Pv-M3 for 28597@debbugs.gnu.org; Fri, 29 Sep 2017 15:12:01 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dy0hU-00037J-FZ for 28597@debbugs.gnu.org; Fri, 29 Sep 2017 15:11:55 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:51597) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dy0hU-000373-B9; Fri, 29 Sep 2017 15:11:52 -0400 Received: from 84.94.185.246.cable.012.net.il ([84.94.185.246]:1483 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1dy0hT-0000RT-Oe; Fri, 29 Sep 2017 15:11:52 -0400 Date: Fri, 29 Sep 2017 22:11:44 +0300 Message-Id: <83mv5d5ngv.fsf@gnu.org> From: Eli Zaretskii In-reply-to: <877ewh74oq.fsf@moondust.localdomain> (nljlistbox2@gmail.com) References: <837ewh8x5z.fsf@gnu.org> <87ing17akt.fsf@moondust.localdomain> <834lrl75o6.fsf@gnu.org> <877ewh74oq.fsf@moondust.localdomain> X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -5.0 (-----) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) > From: nljlistbox2@gmail.com (N. Jackson) > Cc: jwiegley@gmail.com, eggert@cs.ucla.edu, 28597@debbugs.gnu.org > Date: Fri, 29 Sep 2017 14:14:29 -0400 > > > That default is activated only if you do [have Mailutils]. > > I see. > > I don't think that makes sense, does it? I hope it does, as this is what I asked for at the time, for reasons that did make sense to me. > There's nothing terribly odd about my system and if the warning > message from config is true, then _by default_ I'm going to get > built an insecure Emacs. Only if you use POP3 to fetch your mail. Which I presume you don't; if you did; building --without-pop by default would have left you with no way of getting your email into Emacs. > I think that --without-pop should be the default. Unconditionally. We should think about all of our users when we make such decisions. I myself don't use unencrypted POP3 either, but I'm worried about the effect this change could have on someone who does. From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Resent-From: Robert Pluim Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Fri, 29 Sep 2017 20:05:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Eli Zaretskii Cc: jwiegley@gmail.com, eggert@cs.ucla.edu, 28597@debbugs.gnu.org, nljlistbox2@gmail.com Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.15067155015200 (code B ref 28597); Fri, 29 Sep 2017 20:05:02 +0000 Received: (at 28597) by debbugs.gnu.org; 29 Sep 2017 20:05:01 +0000 Received: from localhost ([127.0.0.1]:39666 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dy1Wu-0001Lo-U7 for submit@debbugs.gnu.org; Fri, 29 Sep 2017 16:05:01 -0400 Received: from mail-wr0-f180.google.com ([209.85.128.180]:53678) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dy1Wt-0001LZ-8i for 28597@debbugs.gnu.org; Fri, 29 Sep 2017 16:04:59 -0400 Received: by mail-wr0-f180.google.com with SMTP id 54so419216wrz.10 for <28597@debbugs.gnu.org>; Fri, 29 Sep 2017 13:04:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:references:gmane-reply-to-list:date:in-reply-to :message-id:user-agent:mime-version; bh=qPrfdlUqw4I1WAWNPzYg38AL2jMqQg+Xj90ioQNOxIY=; b=aGpg4ST6WJK5q4DNBjydyExI+BT84yDz82Y42ox2Hir/vKMY65uzob8oHS3G+buaPW 64UwAdHxhea6wXG7QtPUo95HiWjDseSRW3UCj3xA2/GlM17PfGvvq7DPxqeRaUvEe+D0 K5t4up7fdI5VdGs2tqMNIlwd0JOj4T7tuT2Sqv6m5d6VLj5rKYBOb+QPEF2grHAG6ISh Yz7UFbzxpowgmdI2DvFglBUTQG2/XWem3IsoM+UsWLCXo/H7Bj6TIu9RsV1M14mDHisl NpjfkAv/em4y8YBQAsIBdOUYX8Hi6E4gP39xTQ7OrW6Ovp3B7OhmajrjftCpE6NcZpQm OItQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references :gmane-reply-to-list:date:in-reply-to:message-id:user-agent :mime-version; bh=qPrfdlUqw4I1WAWNPzYg38AL2jMqQg+Xj90ioQNOxIY=; b=uRNPk0MWpRFlXJBNtFr8auChWVM/weJ5TwDu3TWh1SlE5IVdCILs3YXC4XDhsRGEgX zQK9Oiag4SUlEYFpZkoifsw26GppNubgYBkhFNpEyHGjucukxZj7lRRKNYxi6pWLTmwP qAcRUcblHydjgJgCGHbscCZPBvIewzazD4EXqTq/nGC+n6U2lAjVOaegGPuvNonP/iD3 QmUwoItar4sZGvE/2PsWxPx9FNaY2jSRxCaFy1O8YkT5Cbq/0NIqyVGdzGpPq0hUYtaQ zv8Q64dSJMfmNyMuLenDcXLT4m0JvS0W5gaqn9kNsX9aOc++ZWNd33JLv97pU8xMWlaQ AJ0g== X-Gm-Message-State: AHPjjUgRiMxsK+cHJxC2u49fFtJS3TIP1WwQW389Y5nvuSgUQkupTWjj TZzdiwr+98M+eqXw5Qfkx0w= X-Google-Smtp-Source: AOwi7QALnKkyBXZ8ZmlB/9rSv/H8+N3lk1q9P4AGjxcoFR26C7NlabAUcQd13rm5TF/lUGxkXbNu6g== X-Received: by 10.223.175.100 with SMTP id z91mr9562786wrc.177.1506715493331; Fri, 29 Sep 2017 13:04:53 -0700 (PDT) Received: from rpluim-ubuntu ([2a01:e34:ecfc:a090:80ba:c42d:69c7:d031]) by smtp.gmail.com with ESMTPSA id i8sm4192539wra.56.2017.09.29.13.04.51 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 29 Sep 2017 13:04:51 -0700 (PDT) From: Robert Pluim References: <837ewh8x5z.fsf@gnu.org> <87r2upd2h5.fsf@gmail.com> <83a81d7666.fsf@gnu.org> Gmane-Reply-To-List: yes Date: Fri, 29 Sep 2017 22:04:49 +0200 In-Reply-To: <83a81d7666.fsf@gnu.org> (Eli Zaretskii's message of "Fri, 29 Sep 2017 20:42:25 +0300") Message-ID: <87h8vl1db2.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.60 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -1.3 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) Eli Zaretskii writes: >> From: Robert Pluim >> Cc: John Wiegley , nljlistbox2@gmail.com, eggert@cs.ucla.edu, 28597@debbugs.gnu.org >> Date: Fri, 29 Sep 2017 16:05:42 +0200 >> >> I thought we were discussing making --without-pop be the default even >> if GNU Mailutils are not available, and it's what I'm >> advocating. Paul's patch only did that if they were found. > > If that's what people want, fine with me on Posix platforms, but not > on MS-Windows (where Mailutils are not available, and probably never > will be). > I'll defer to you on MS-Windows affairs :-) >> If that means that some people need to install GNU Mailutils, which >> support secure(r) protocols, then I'm all in favour. > > But the effect of encouraging the installation of Mailutils will only > be achieved if the configure script displays something about that. > AFIU, the proposal was to make --without-pop the default and not > display any message, in which case people just get movemail without > POP3, and we might be silently breaking someone's setup. Do we want > that? No, we don't. I'll see if I can come up with some verbiage over the weekend, once I reconfigure my brain to (re-)understand autoconf Robert From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Resent-From: Robert Pluim Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Mon, 02 Oct 2017 16:30:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Eli Zaretskii Cc: jwiegley@gmail.com, eggert@cs.ucla.edu, 28597@debbugs.gnu.org, nljlistbox2@gmail.com Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.150696177621974 (code B ref 28597); Mon, 02 Oct 2017 16:30:02 +0000 Received: (at 28597) by debbugs.gnu.org; 2 Oct 2017 16:29:36 +0000 Received: from localhost ([127.0.0.1]:44414 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dz3b3-0005iH-2z for submit@debbugs.gnu.org; Mon, 02 Oct 2017 12:29:36 -0400 Received: from mail-wm0-f46.google.com ([74.125.82.46]:56944) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dz3ax-0005i0-Lb for 28597@debbugs.gnu.org; Mon, 02 Oct 2017 12:29:31 -0400 Received: by mail-wm0-f46.google.com with SMTP id e195so7995705wma.5 for <28597@debbugs.gnu.org>; Mon, 02 Oct 2017 09:29:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:references:gmane-reply-to-list:date:in-reply-to :message-id:user-agent:mime-version; bh=AnlWAhZEXV8mqJS8+w4CZFTeU/+YERrN3QGDmi5ayds=; b=bloszhhcuDtt8ghnouk1WHcsjA6p1TI0ZHvvNVg3C/KeWq20ceTcB/TwjSNQZktq5j ESEGtLEWWhHgY7dDrBJfV5krz+Py7DYfJQ8A2PzfYg9Ub/iJXmSuJNrTVYSHgtSaAhv8 elllScFW36bZgBc9SQFYbCoNfaPfaxJleQNITGwMSPGfY6yNP6BAlcaN5fryV0yuPNsA X82IrJ0/aN0DVbsS3Hu5WQr7HpU0CHiFzArC+ivnPe1F6WVXf0t9OUpEEGz8k6Sw2KEh j/9Kj8Jr3zTALvBrwCsUP3Za/5ehdy77qR5K2roB0ZaGCixwk2mgYD0lkTyIdB88TLWj Trqw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references :gmane-reply-to-list:date:in-reply-to:message-id:user-agent :mime-version; bh=AnlWAhZEXV8mqJS8+w4CZFTeU/+YERrN3QGDmi5ayds=; b=eBt/VnFMAoxHWY2JMaQFTYmw/RZFbhboWViCdvbcnFeq2uTAdgbKngTHbWNjKpBA/T dfnlWV1W5h/bSn5TH6jC8kPrzd7SqXlTXu7Uuze7tinsaOPLCUNlJKyrb8mQahMumTMS OMHRKu7k6qnIbYB/OOjVnSyU0VJ3naAuxVC4yUYcwTB8mcEpFP7/ZeAXHg07p2epuDpf 9QtaXu03FZPgJUz1RHaOBv+Kv3KE+QEwPgKoge9mIpenrocPU/LvRQLLRhdwrdFujjHG QHY3aFm9vm/8ymwXnJK37SqAwe75BF/SWe6kdJcgb3ZquqHIusx/4ODkfO/qRmuRBmvr p4Yg== X-Gm-Message-State: AMCzsaWBF1YN0QNKMAb4+/a4DGDy5w1aCqj8Xyd+6LKgfD0OXnF8Rvo3 j4UH2Yid7waJhus4rz9//4k= X-Google-Smtp-Source: AOwi7QC3Wc6eJMhV7xhlZKBJkLL+Dq382+OLdTU0cvafXHRWWtEBbsNReJZJrZABRvdzJpHlmIdU0w== X-Received: by 10.28.165.212 with SMTP id o203mr5528652wme.68.1506961761769; Mon, 02 Oct 2017 09:29:21 -0700 (PDT) Received: from rpluim-ubuntu ([149.5.228.1]) by smtp.gmail.com with ESMTPSA id p15sm4925621wmi.2.2017.10.02.09.29.19 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 02 Oct 2017 09:29:20 -0700 (PDT) From: Robert Pluim References: <837ewh8x5z.fsf@gnu.org> <87r2upd2h5.fsf@gmail.com> <83a81d7666.fsf@gnu.org> <87h8vl1db2.fsf@gmail.com> Gmane-Reply-To-List: yes Date: Mon, 02 Oct 2017 18:29:13 +0200 In-Reply-To: <87h8vl1db2.fsf@gmail.com> (Robert Pluim's message of "Fri, 29 Sep 2017 22:04:49 +0200") Message-ID: <873771wm1y.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.60 (gnu/linux) MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="=-=-=" X-Spam-Score: 0.5 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.5 (/) --=-=-= Content-Type: text/plain Robert Pluim writes: > No, we don't. I'll see if I can come up with some verbiage over the > weekend, once I reconfigure my brain to (re-)understand autoconf Apologies for the delay. Autoconf and I don't get on. The attached patch against emacs-26 results in the following outputs at the end of the ./configure run. I'm not sure we should suggest '--without-pop' when that's the new default, but it's probably best to be explicit. ---begin--- No mailutils installed, ./configure: configure: WARNING: This configuration installs a 'movemail' program that does not support POP3 mail retrieval at all due to lack of support for secure channels. You might want to install GNU Mailutils You can use './configure --with-pop', but this is not recommended. No mailutils installed, ./configure --with-pop: configure: WARNING: This configuration installs a 'movemail' program that retrieves POP3 email via only insecure channels. To omit insecure POP3, you can use './configure --without-pop'. With mailutils installed, ./configure --without-mailutils: configure: WARNING: This configuration installs a 'movemail' program that does not support POP3 mail retrieval at all due to lack of support for secure channels. You can use './configure --without-mailutils --with-pop', but this is not recommended. With mailutils installed, ./configure --without-mailutils --with-pop: configure: WARNING: This configuration installs a 'movemail' program that retrieves POP3 email via only insecure channels. To omit insecure POP3, you can use './configure --without-pop'. With mailutils installed, ./configure --with-pop: # no output With mailutils installed, ./configure # no output ---end--- --=-=-= Content-Type: text/x-diff Content-Disposition: inline; filename=0001-Default-to-without-pop.patch >From 2002807183af9e1c61ecd36bd04c28a269b7a6b5 Mon Sep 17 00:00:00 2001 From: Robert Pluim Date: Mon, 2 Oct 2017 18:20:58 +0200 Subject: [PATCH] Default to --without-pop 2017-10-02 Robert Pluim * configure.ac (with_pop): Default to off. Warn loudly when this results in not supporting insecure POP3. --- configure.ac | 33 ++++++++++++++++++++------------- 1 file changed, 20 insertions(+), 13 deletions(-) diff --git a/configure.ac b/configure.ac index 0b0bb5e144..c692c7a532 100644 --- a/configure.ac +++ b/configure.ac @@ -232,9 +232,11 @@ AC_DEFUN m4_bpatsubst([with_$1], [[^0-9a-z]], [_])=$with_features])dnl ])dnl -# FIXME: The default options '--without-mailutils --with-pop' result +# The options '--without-mailutils --with-pop' result # in a movemail implementation that supports only unencrypted POP3 -# connections. Encrypted connections should be the default. +# connections, but we warn about that later. By default we +# do *not* support unencrypted POP3 +# Encrypted connections should be the default. AC_ARG_WITH([mailutils], [AS_HELP_STRING([--with-mailutils], @@ -251,8 +253,8 @@ AC_DEFUN fi AC_SUBST([with_mailutils]) -OPTION_DEFAULT_ON([pop], - [don't support POP mail retrieval with movemail (--without-pop or +OPTION_DEFAULT_OFF([pop], + [support POP mail retrieval with movemail (--without-pop or --with-mailutils is recommended, as movemail POP is insecure)]) if test "$with_pop" = yes; then AC_DEFINE(MAIL_USE_POP) @@ -5566,23 +5568,28 @@ m4_define if test ! "$with_mailutils"; then if test "$with_pop" = yes; then AC_MSG_WARN([This configuration installs a 'movemail' program -that retrieves POP3 email via only insecure channels. -To omit insecure POP3, you can use '$0 --without-pop'.]) - fi - + that retrieves POP3 email via only insecure channels. + To omit insecure POP3, you can use '$0 --without-pop'.]) + else case $opsys in mingw32) # Don't suggest GNU Mailutils, as it hasn't been ported. ;; *) - emacs_fix_movemail="use '$0 --with-mailutils'" + emacs_use_pop="You can use '$0 ${emacs_config_options} --with-pop', + but this is not recommended." case `(movemail --version) 2>/dev/null` in - *Mailutils*) ;; - *) emacs_fix_movemail="install GNU Mailutils - and $emacs_fix_movemail";; + *Mailutils*) emacs_fix_suggestion="$emacs_use_pop";; + *) emacs_fix_suggestion="You might want to install GNU Mailutils + + $emacs_use_pop";; esac - AC_MSG_NOTICE([You might want to $emacs_fix_movemail.]);; + AC_MSG_WARN([This configuration installs a 'movemail' program + that does not support POP3 mail retrieval at all due to lack of + support for secure channels. + $emacs_fix_suggestion]);; esac + fi fi test "$MAKE" = make || AC_MSG_NOTICE([Now you can run '$MAKE'.]) -- 2.14.2.642.g20fed7cad --=-=-=-- From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Resent-From: nljlistbox2@gmail.com (N. Jackson) Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Mon, 02 Oct 2017 17:23:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Eli Zaretskii Cc: jwiegley@gmail.com, Robert Pluim , eggert@cs.ucla.edu, 28597@debbugs.gnu.org Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.150696493127587 (code B ref 28597); Mon, 02 Oct 2017 17:23:01 +0000 Received: (at 28597) by debbugs.gnu.org; 2 Oct 2017 17:22:11 +0000 Received: from localhost ([127.0.0.1]:44469 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dz4Pz-0007At-GP for submit@debbugs.gnu.org; Mon, 02 Oct 2017 13:22:11 -0400 Received: from mail-io0-f172.google.com ([209.85.223.172]:49499) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dz4Px-0007Af-F0 for 28597@debbugs.gnu.org; Mon, 02 Oct 2017 13:22:10 -0400 Received: by mail-io0-f172.google.com with SMTP id 21so5357977iof.6 for <28597@debbugs.gnu.org>; Mon, 02 Oct 2017 10:22:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version; bh=uEPljIn+hUMugUmuBpIlBZ285jD+CtEMZftd2hfFKSY=; b=K5J5ahYP37hf/VWEh/Nhj1m2bVf6UQr6DLoRn+Bg81upxMYN1tsQANwtkE1nsBm6IC rKhNnRp/mEGCyMrQ0fDWdT3urdlJqgbhtDNpR7fZexFy0HV77rU0FOYa2PYLs/35+KHg Ud+pmnMypWlPEmL1GwhWPISxMWVeP4o/aZgiP4xZytknsaT1+O56n0b5UXMoDWA0DeCj HDr7MyGGsi+KeX1MySuY9ypNujy8NTIIE0R/dpP31kuVArQEIeH0ZbNKrTbDSNeqr3Ig mq5QFIuzdDCOYfOJ5oYbW4KbEgHHJukUe1LBBbJxe9hbAj0QhsG7QAcC3a11HkBYbM0I PfSA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to :message-id:user-agent:mime-version; bh=uEPljIn+hUMugUmuBpIlBZ285jD+CtEMZftd2hfFKSY=; b=Zx9UHjTVJhAGLM9yvCZYQZ07IMEiEoVATQOqJ4fgbWe0ALWGP4I1Iyx3Urx4beSyY7 EM2E7Z1ldTTKbCPIx/HHzw/StRa0LQuLKBkj65OaDYiB1UYqv4BBfgZGZ9gb+6EKCt43 6PTpZN7xdJs6LMdy1c1Nwm9QIf66iSTui2WNOr/fDAIj/LAIukxk69WMEkJG8JU0VAUk bpJFbd+p4Qbb8LyFGZaaTKKmy07OYCkG4VW1s3LjfPZgG8rjh8hbeLpbPAGmJISk/W8J XbZVL00W6bp95iaPcvh4yuiran6BxRRi+QjxUHVIYwcgbEvP0FD83I/ujpuB3zgff+vA 5sHg== X-Gm-Message-State: AMCzsaUSUdlsNgXll6z+XuzXbD/TvMBEZbqW7wBTRSbKZeXl7B0g1j8E HVeByH3i7M/J7tf2HAOY5fY= X-Google-Smtp-Source: AOwi7QC1Txradmr38Aiw0S+L1+L+0EEpIH7Rp4JCU59MmtHYD/9yauY4p1c2MGt0UU7No3jCZWu1lA== X-Received: by 10.107.11.229 with SMTP id 98mr25783801iol.304.1506964923683; Mon, 02 Oct 2017 10:22:03 -0700 (PDT) Received: from moondust.localdomain.nodomain.none ([72.143.113.194]) by smtp.gmail.com with ESMTPSA id l191sm4660750ioe.22.2017.10.02.10.22.02 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Mon, 02 Oct 2017 10:22:03 -0700 (PDT) From: nljlistbox2@gmail.com (N. Jackson) References: <837ewh8x5z.fsf@gnu.org> <87ing17akt.fsf@moondust.localdomain> <834lrl75o6.fsf@gnu.org> <877ewh74oq.fsf@moondust.localdomain> <83mv5d5ngv.fsf@gnu.org> Date: Mon, 02 Oct 2017 13:22:01 -0400 In-Reply-To: <83mv5d5ngv.fsf@gnu.org> (Eli Zaretskii's message of "Fri, 29 Sep 2017 22:11:44 +0300") Message-ID: <87fub131om.fsf@moondust.localdomain> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.60 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -2.0 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.0 (--) At 22:11 +0300 on Friday 2017-09-29, Eli Zaretskii wrote: > >> From: nljlistbox2@gmail.com (N. Jackson) >> Date: Fri, 29 Sep 2017 14:14:29 -0400 >> >> I don't think that makes sense, does it? > > I hope it does, as this is what I asked for at the time, for > reasons that did make sense to me. Indeed. You considered broader factors than I was aware of previously. >> There's nothing terribly odd about my system and if the warning >> message from config is true, then _by default_ I'm going to get >> built an insecure Emacs. > > Only if you use POP3 to fetch your mail. This raised a question in my mind (which has probably already been considered and dealt with). When a user has an Emacs that's configured to use an insecure movemail for POP3, when they issue a command in Emacs that invokes it, do they get a warning from Emacs? Given that many users don't build their own Emacs, they'll not see a warning from configure, so it would seem sensible for them to be warned at run time. (Given that they won't want to be plagued with a warning every time they check their mail, I'm thinking of a warning that appears when a relevant command it used for the first time, similar to the way disabled commands work.) N. From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Resent-From: Eli Zaretskii Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Mon, 02 Oct 2017 17:34:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: nljlistbox2@gmail.com (N. Jackson) Cc: jwiegley@gmail.com, rpluim@gmail.com, eggert@cs.ucla.edu, 28597@debbugs.gnu.org Reply-To: Eli Zaretskii Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.150696559128811 (code B ref 28597); Mon, 02 Oct 2017 17:34:01 +0000 Received: (at 28597) by debbugs.gnu.org; 2 Oct 2017 17:33:11 +0000 Received: from localhost ([127.0.0.1]:44482 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dz4ab-0007Ub-3d for submit@debbugs.gnu.org; Mon, 02 Oct 2017 13:33:10 -0400 Received: from eggs.gnu.org ([208.118.235.92]:44807) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dz4aZ-0007U0-Hb for 28597@debbugs.gnu.org; Mon, 02 Oct 2017 13:33:07 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dz4aT-0004i0-Mf for 28597@debbugs.gnu.org; Mon, 02 Oct 2017 13:33:02 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-0.5 required=5.0 tests=BAYES_05,RP_MATCHES_RCVD autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:44215) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dz4aO-0004df-9g; Mon, 02 Oct 2017 13:32:56 -0400 Received: from 84.94.185.246.cable.012.net.il ([84.94.185.246]:2226 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1dz4aN-0007Ia-6y; Mon, 02 Oct 2017 13:32:55 -0400 Date: Mon, 02 Oct 2017 20:32:37 +0300 Message-Id: <83y3ot1mmi.fsf@gnu.org> From: Eli Zaretskii In-reply-to: <87fub131om.fsf@moondust.localdomain> (nljlistbox2@gmail.com) References: <837ewh8x5z.fsf@gnu.org> <87ing17akt.fsf@moondust.localdomain> <834lrl75o6.fsf@gnu.org> <877ewh74oq.fsf@moondust.localdomain> <83mv5d5ngv.fsf@gnu.org> <87fub131om.fsf@moondust.localdomain> X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -5.0 (-----) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) > From: nljlistbox2@gmail.com (N. Jackson) > Cc: jwiegley@gmail.com, eggert@cs.ucla.edu, 28597@debbugs.gnu.org, Robert Pluim > Date: Mon, 02 Oct 2017 13:22:01 -0400 > > >> There's nothing terribly odd about my system and if the warning > >> message from config is true, then _by default_ I'm going to get > >> built an insecure Emacs. > > > > Only if you use POP3 to fetch your mail. > > This raised a question in my mind (which has probably already > been considered and dealt with). When a user has an Emacs that's > configured to use an insecure movemail for POP3, when they issue a > command in Emacs that invokes it, do they get a warning from > Emacs? No, they don't. But POP3 is not something movemail will silently use by itself, the user needs to specify a POP3 "url", referencing the server and the user's id (and possibly a password as well) for it to do so. So the user who does that _knows_ they use POP3. IOW, a deliberate user action is needed for POP3 to be used. > Given that many users don't build their own Emacs, they'll not see > a warning from configure, so it would seem sensible for them to be > warned at run time. (Given that they won't want to be plagued with > a warning every time they check their mail, I'm thinking of a > warning that appears when a relevant command it used for the first > time, similar to the way disabled commands work.) We also don't warn them when they use HTTP or FTP from Emacs, on the assumption that users know what they are doing. There's a limit to our ability to nag users in order to save them from themselves. At some point, we need to start treating them as responsible adults, IMO. From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Resent-From: Paul Eggert Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Mon, 02 Oct 2017 18:01:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Eli Zaretskii , "N. Jackson" Cc: jwiegley@gmail.com, rpluim@gmail.com, 28597@debbugs.gnu.org Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.15069672616162 (code B ref 28597); Mon, 02 Oct 2017 18:01:02 +0000 Received: (at 28597) by debbugs.gnu.org; 2 Oct 2017 18:01:01 +0000 Received: from localhost ([127.0.0.1]:44506 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dz51Y-0001bK-Jj for submit@debbugs.gnu.org; Mon, 02 Oct 2017 14:01:00 -0400 Received: from zimbra.cs.ucla.edu ([131.179.128.68]:41432) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dz51U-0001ay-ID for 28597@debbugs.gnu.org; Mon, 02 Oct 2017 14:00:57 -0400 Received: from localhost (localhost [127.0.0.1]) by zimbra.cs.ucla.edu (Postfix) with ESMTP id 0EEE0160E00; Mon, 2 Oct 2017 11:00:50 -0700 (PDT) Received: from zimbra.cs.ucla.edu ([127.0.0.1]) by localhost (zimbra.cs.ucla.edu [127.0.0.1]) (amavisd-new, port 10032) with ESMTP id 54VWvlcZ9ljR; Mon, 2 Oct 2017 11:00:48 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by zimbra.cs.ucla.edu (Postfix) with ESMTP id 234C4160E03; Mon, 2 Oct 2017 11:00:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at zimbra.cs.ucla.edu Received: from zimbra.cs.ucla.edu ([127.0.0.1]) by localhost (zimbra.cs.ucla.edu [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id TGLzJ0i1CSR0; Mon, 2 Oct 2017 11:00:48 -0700 (PDT) Received: from Penguin.CS.UCLA.EDU (Penguin.CS.UCLA.EDU [131.179.64.200]) by zimbra.cs.ucla.edu (Postfix) with ESMTPSA id 06A1B160E00; Mon, 2 Oct 2017 11:00:48 -0700 (PDT) References: <837ewh8x5z.fsf@gnu.org> <87ing17akt.fsf@moondust.localdomain> <834lrl75o6.fsf@gnu.org> <877ewh74oq.fsf@moondust.localdomain> <83mv5d5ngv.fsf@gnu.org> <87fub131om.fsf@moondust.localdomain> <83y3ot1mmi.fsf@gnu.org> From: Paul Eggert Organization: UCLA Computer Science Department Message-ID: Date: Mon, 2 Oct 2017 11:00:47 -0700 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.3.0 MIME-Version: 1.0 In-Reply-To: <83y3ot1mmi.fsf@gnu.org> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-US X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) On 10/02/2017 10:32 AM, Eli Zaretskii wrote: > POP3 is not something movemail will silently use > by itself, the user needs to specify a POP3 "url", referencing the > server and the user's id (and possibly a password as well) for it to > do so. So the user who does that_knows_ they use POP3. I'm dubious. These days, email clients often use some sort of secure connection by default even if you just ask for POP. For example, Thunderbird's mail account setup defaults to IMAP, but if you specify POP3 it then defaults to autodetecting SSL/TLS or STARTTLS; you must explicitly override the default (or specify a server that does not support encryption) to get an unencrypted connection. Users accustomed to other email clients are likely to expect that Emacs "pop:whatever" will do something similar. From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Resent-From: Paul Eggert Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Mon, 02 Oct 2017 18:01:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: "N. Jackson" , Eli Zaretskii Cc: jwiegley@gmail.com, Robert Pluim , 28597@debbugs.gnu.org Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.15069672626186 (code B ref 28597); Mon, 02 Oct 2017 18:01:02 +0000 Received: (at 28597) by debbugs.gnu.org; 2 Oct 2017 18:01:02 +0000 Received: from localhost ([127.0.0.1]:44508 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dz51Z-0001bf-Uc for submit@debbugs.gnu.org; Mon, 02 Oct 2017 14:01:02 -0400 Received: from zimbra.cs.ucla.edu ([131.179.128.68]:41456) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dz51W-0001b2-Qc for 28597@debbugs.gnu.org; Mon, 02 Oct 2017 14:01:00 -0400 Received: from localhost (localhost [127.0.0.1]) by zimbra.cs.ucla.edu (Postfix) with ESMTP id 6A2A1160E03; Mon, 2 Oct 2017 11:00:53 -0700 (PDT) Received: from zimbra.cs.ucla.edu ([127.0.0.1]) by localhost (zimbra.cs.ucla.edu [127.0.0.1]) (amavisd-new, port 10032) with ESMTP id XFlmj0jtWB7x; Mon, 2 Oct 2017 11:00:52 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by zimbra.cs.ucla.edu (Postfix) with ESMTP id 9EF33160E04; Mon, 2 Oct 2017 11:00:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at zimbra.cs.ucla.edu Received: from zimbra.cs.ucla.edu ([127.0.0.1]) by localhost (zimbra.cs.ucla.edu [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id HPdF562aH6yS; Mon, 2 Oct 2017 11:00:52 -0700 (PDT) Received: from Penguin.CS.UCLA.EDU (Penguin.CS.UCLA.EDU [131.179.64.200]) by zimbra.cs.ucla.edu (Postfix) with ESMTPSA id 86A4E160E03; Mon, 2 Oct 2017 11:00:52 -0700 (PDT) References: <837ewh8x5z.fsf@gnu.org> <87ing17akt.fsf@moondust.localdomain> <834lrl75o6.fsf@gnu.org> <877ewh74oq.fsf@moondust.localdomain> <83mv5d5ngv.fsf@gnu.org> <87fub131om.fsf@moondust.localdomain> From: Paul Eggert Organization: UCLA Computer Science Department Message-ID: <7f7f319f-adec-d518-9350-3a7ba43793e2@cs.ucla.edu> Date: Mon, 2 Oct 2017 11:00:51 -0700 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.3.0 MIME-Version: 1.0 In-Reply-To: <87fub131om.fsf@moondust.localdomain> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-US X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) On 10/02/2017 10:22 AM, N. Jackson wrote: > When a user has an Emacs that's > configured to use an insecure movemail for POP3, when they issue a > command in Emacs that invokes it, do they get a warning from > Emacs? We discussed options for warning at some length (sorry, don't remember where; perhaps Gnus-related?), with the idea of putting a flag in the mode line or something like that. I don't recall what happened (if anything). From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Resent-From: Paul Eggert Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Mon, 02 Oct 2017 18:24:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Robert Pluim , Eli Zaretskii Cc: jwiegley@gmail.com, 28597@debbugs.gnu.org, nljlistbox2@gmail.com Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.15069686008348 (code B ref 28597); Mon, 02 Oct 2017 18:24:01 +0000 Received: (at 28597) by debbugs.gnu.org; 2 Oct 2017 18:23:20 +0000 Received: from localhost ([127.0.0.1]:44529 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dz5NA-0002AZ-9N for submit@debbugs.gnu.org; Mon, 02 Oct 2017 14:23:20 -0400 Received: from zimbra.cs.ucla.edu ([131.179.128.68]:45418) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dz5N8-0002AM-HT for 28597@debbugs.gnu.org; Mon, 02 Oct 2017 14:23:19 -0400 Received: from localhost (localhost [127.0.0.1]) by zimbra.cs.ucla.edu (Postfix) with ESMTP id 820B2160E00; Mon, 2 Oct 2017 11:23:11 -0700 (PDT) Received: from zimbra.cs.ucla.edu ([127.0.0.1]) by localhost (zimbra.cs.ucla.edu [127.0.0.1]) (amavisd-new, port 10032) with ESMTP id voNuByNgei21; Mon, 2 Oct 2017 11:23:06 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by zimbra.cs.ucla.edu (Postfix) with ESMTP id 91837160E05; Mon, 2 Oct 2017 11:23:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at zimbra.cs.ucla.edu Received: from zimbra.cs.ucla.edu ([127.0.0.1]) by localhost (zimbra.cs.ucla.edu [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id STh56O4gp_Ev; Mon, 2 Oct 2017 11:23:06 -0700 (PDT) Received: from Penguin.CS.UCLA.EDU (Penguin.CS.UCLA.EDU [131.179.64.200]) by zimbra.cs.ucla.edu (Postfix) with ESMTPSA id 77FBF160E01; Mon, 2 Oct 2017 11:23:06 -0700 (PDT) References: <837ewh8x5z.fsf@gnu.org> <87r2upd2h5.fsf@gmail.com> <83a81d7666.fsf@gnu.org> <87h8vl1db2.fsf@gmail.com> <873771wm1y.fsf@gmail.com> From: Paul Eggert Organization: UCLA Computer Science Department Message-ID: Date: Mon, 2 Oct 2017 11:23:05 -0700 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.3.0 MIME-Version: 1.0 In-Reply-To: <873771wm1y.fsf@gmail.com> Content-Type: multipart/mixed; boundary="------------C28F3EE0326DE1C2AF63E00D" Content-Language: en-US X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) This is a multi-part message in MIME format. --------------C28F3EE0326DE1C2AF63E00D Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Thanks for working on this. However, Eli asked for --with-pop to remain the default on native MS-Windows. Also, I found the newly-added warnings confusing (though admittedly everything is confusing here :-). How about the attached patch instead? It does not change the configure-time warnings. It merely changes the default, so that --without-pop is now the default on platforms other than native MS-Windows. --------------C28F3EE0326DE1C2AF63E00D Content-Type: text/x-patch; name="0001-with-pop-is-now-the-default-only-on-MS-Windows.patch" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename*0="0001-with-pop-is-now-the-default-only-on-MS-Windows.patch" >From 0e6c02134df40b56ca3b100ae0cc1a9d957a6e7f Mon Sep 17 00:00:00 2001 From: Paul Eggert Date: Mon, 2 Oct 2017 11:17:36 -0700 Subject: [PATCH] --with-pop is now the default only on MS-Windows Problem reported by N. Jackson (Bug#28597). This improves an earlier suggestion by Robert Pluim (Bug#28597#47). * INSTALL, configure.ac, etc/NEWS: Make --with-pop the default only on native MS-Windows. --- INSTALL | 6 ++++-- configure.ac | 19 +++++++++++++------ etc/NEWS | 5 +++-- 3 files changed, 20 insertions(+), 10 deletions(-) diff --git a/INSTALL b/INSTALL index e76e843ce2..e93b3064fc 100644 --- a/INSTALL +++ b/INSTALL @@ -273,8 +273,10 @@ a POP3 server by default. Versions of the POP protocol older than POP3 are not supported. While POP3 support is typically enabled, whether Emacs actually uses POP3 is controlled by individual users; see the Rmail chapter of the Emacs manual. Unless --with-mailutils is -in effect, it is a good idea to configure --without-pop so that users -are less likely to inadvertently read email via insecure channels. +in effect, it is a good idea to configure without POP3 support so that +users are less likely to inadvertently read email via insecure +channels. On native MS-Windows, --with-pop is the default; on other +platforms, --without-pop is the default. For image support you may have to download, build, and install the appropriate image support libraries for image types other than XBM and diff --git a/configure.ac b/configure.ac index eb2c684040..3feac73bed 100644 --- a/configure.ac +++ b/configure.ac @@ -232,9 +232,9 @@ AC_DEFUN m4_bpatsubst([with_$1], [[^0-9a-z]], [_])=$with_features])dnl ])dnl -# FIXME: The default options '--without-mailutils --with-pop' result -# in a movemail implementation that supports only unencrypted POP3 -# connections. Encrypted connections should be the default. +# For retrieving mail, unencrypted network connections are the default +# only on native MS-Windows platforms. (FIXME: These platforms should +# also be secure by default.) AC_ARG_WITH([mailutils], [AS_HELP_STRING([--with-mailutils], @@ -251,9 +251,16 @@ AC_DEFUN fi AC_SUBST([with_mailutils]) -OPTION_DEFAULT_ON([pop], - [don't support POP mail retrieval with movemail (--without-pop or - --with-mailutils is recommended, as movemail POP is insecure)]) +AC_ARG_WITH([pop], + [AS_HELP_STRING([--with-pop], + [Support POP mail retrieval if Emacs movemail is used (not recommended, + as Emacs movemail POP is insecure). This is the default only on + native MS-Windows.])], + [], + [case $host in + *-mingw*) with_pop=yes;; + *) with_pop=no;; + esac]) if test "$with_pop" = yes; then AC_DEFINE(MAIL_USE_POP) fi diff --git a/etc/NEWS b/etc/NEWS index b734e8dd19..62d2450f9a 100644 --- a/etc/NEWS +++ b/etc/NEWS @@ -35,8 +35,9 @@ GNU Mailutils to retrieve email. It is recommended, and is the default if GNU Mailutils is installed. When --with-mailutils is not in effect, the Emacs build procedure by default continues to build and install a limited 'movemail' substitute that retrieves POP3 email only -via insecure channels; to avoid this problem, use either ---with-mailutils or --without-pop when configuring. +via insecure channels. To avoid this problem, use either +--with-mailutils or --without-pop when configuring; --without-pop +is the default on platforms other than native MS-Windows. ** The new option 'configure --enable-gcc-warnings=warn-only' causes GCC to issue warnings without stopping the build. This behavior is -- 2.13.6 --------------C28F3EE0326DE1C2AF63E00D-- From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Resent-From: Eli Zaretskii Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Mon, 02 Oct 2017 18:49:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Paul Eggert Cc: nljlistbox2@gmail.com, rpluim@gmail.com, 28597@debbugs.gnu.org, jwiegley@gmail.com Reply-To: Eli Zaretskii Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.150697008810709 (code B ref 28597); Mon, 02 Oct 2017 18:49:02 +0000 Received: (at 28597) by debbugs.gnu.org; 2 Oct 2017 18:48:08 +0000 Received: from localhost ([127.0.0.1]:44544 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dz5l9-0002mf-VT for submit@debbugs.gnu.org; Mon, 02 Oct 2017 14:48:08 -0400 Received: from eggs.gnu.org ([208.118.235.92]:47874) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dz5l5-0002m6-WD for 28597@debbugs.gnu.org; Mon, 02 Oct 2017 14:48:06 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dz5kz-0002hZ-Ue for 28597@debbugs.gnu.org; Mon, 02 Oct 2017 14:47:58 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:45385) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dz5kt-0002So-59; Mon, 02 Oct 2017 14:47:51 -0400 Received: from 84.94.185.246.cable.012.net.il ([84.94.185.246]:2305 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1dz5ks-0006dD-5M; Mon, 02 Oct 2017 14:47:50 -0400 Date: Mon, 02 Oct 2017 21:47:32 +0300 Message-Id: <83tvzh1j5n.fsf@gnu.org> From: Eli Zaretskii In-reply-to: (message from Paul Eggert on Mon, 2 Oct 2017 11:00:47 -0700) References: <837ewh8x5z.fsf@gnu.org> <87ing17akt.fsf@moondust.localdomain> <834lrl75o6.fsf@gnu.org> <877ewh74oq.fsf@moondust.localdomain> <83mv5d5ngv.fsf@gnu.org> <87fub131om.fsf@moondust.localdomain> <83y3ot1mmi.fsf@gnu.org> X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -5.0 (-----) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) > Cc: jwiegley@gmail.com, 28597@debbugs.gnu.org, rpluim@gmail.com > From: Paul Eggert > Date: Mon, 2 Oct 2017 11:00:47 -0700 > > Users accustomed to other email clients are likely to expect that Emacs > "pop:whatever" will do something similar. I'm dubious. And I don't see how setting up other MUA is of any use here, because we also use an encrypted POP3 connection _if_it's_available_, e.g. via Mailutils, Gnus, etc. But nagging users each time they invoke movemail to fetch via POP3 is IMO unacceptable. I'm sick and tired of similar nagging from Firefox, and I definitely will object that Emacs behaves the same. We shouldn't patronize our users to that degree. Let the Emacs packagers worry about making their distributions more secure e,g, by depending on Mailutils. Anyway, I think we've cut enough slices of this salami, so let's stop, and let's leave those who want to use POP3 nonetheless to their devices. From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Resent-From: Paul Eggert Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Mon, 02 Oct 2017 23:21:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Eli Zaretskii Cc: nljlistbox2@gmail.com, rpluim@gmail.com, 28597@debbugs.gnu.org, jwiegley@gmail.com Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.15069864364839 (code B ref 28597); Mon, 02 Oct 2017 23:21:01 +0000 Received: (at 28597) by debbugs.gnu.org; 2 Oct 2017 23:20:36 +0000 Received: from localhost ([127.0.0.1]:44671 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dzA0p-0001Fx-Oo for submit@debbugs.gnu.org; Mon, 02 Oct 2017 19:20:35 -0400 Received: from zimbra.cs.ucla.edu ([131.179.128.68]:42854) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dzA0o-0001Fj-1O for 28597@debbugs.gnu.org; Mon, 02 Oct 2017 19:20:34 -0400 Received: from localhost (localhost [127.0.0.1]) by zimbra.cs.ucla.edu (Postfix) with ESMTP id 135D5160D98; Mon, 2 Oct 2017 16:20:28 -0700 (PDT) Received: from zimbra.cs.ucla.edu ([127.0.0.1]) by localhost (zimbra.cs.ucla.edu [127.0.0.1]) (amavisd-new, port 10032) with ESMTP id mSTzDXsvnPAO; Mon, 2 Oct 2017 16:20:27 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by zimbra.cs.ucla.edu (Postfix) with ESMTP id 46176160E05; Mon, 2 Oct 2017 16:20:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at zimbra.cs.ucla.edu Received: from zimbra.cs.ucla.edu ([127.0.0.1]) by localhost (zimbra.cs.ucla.edu [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id LvOS19Z3lhxc; Mon, 2 Oct 2017 16:20:27 -0700 (PDT) Received: from Penguin.CS.UCLA.EDU (Penguin.CS.UCLA.EDU [131.179.64.200]) by zimbra.cs.ucla.edu (Postfix) with ESMTPSA id 28FB1160D98; Mon, 2 Oct 2017 16:20:27 -0700 (PDT) References: <837ewh8x5z.fsf@gnu.org> <87ing17akt.fsf@moondust.localdomain> <834lrl75o6.fsf@gnu.org> <877ewh74oq.fsf@moondust.localdomain> <83mv5d5ngv.fsf@gnu.org> <87fub131om.fsf@moondust.localdomain> <83y3ot1mmi.fsf@gnu.org> <83tvzh1j5n.fsf@gnu.org> From: Paul Eggert Organization: UCLA Computer Science Department Message-ID: <9f1de57c-91a7-11bd-3db6-14e14026da99@cs.ucla.edu> Date: Mon, 2 Oct 2017 16:20:26 -0700 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.3.0 MIME-Version: 1.0 In-Reply-To: <83tvzh1j5n.fsf@gnu.org> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: quoted-printable X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) On 10/02/2017 11:47 AM, Eli Zaretskii wrote: > nagging users each time they invoke movemail to fetch via POP3 is > IMO unacceptable. Yes, that suggestion is problematic. But that (older) discussion is=20 somewhat independent of the current thread, which is about builders and=20 installers more than it is about users. > we also use an encrypted POP3 connection > _if_it's_available_, e.g. via Mailutils, Gnus, etc. The concern here is about RMAIL, which currently uses Emacs movemail in=20 the all-too-common case where Mailutils is not installed. In emacs-26=20 the relevant section of the Emacs manual (doc/emacs/rmail.texi) says for=20 the pop: protocol: "If the server supports it, =E2=80=98movemail=E2=80=99= tries to use=20 an encrypted connection=E2=80=94use the =E2=80=98pops=E2=80=99 form to re= quire one." This=20 documents 'pop:' as meaning "encrypt if the server supports encryption,=20 otherwise fall back on unencrypted", which is a natural expectation for=20 users nowadays and is how Thunderbird works by default; but it's not how=20 RMAIL works with Emacs movemail and 'pop:', as these connections are=20 always unencrypted. > I think we've cut enough slices of this salami, so let's stop, Does this mean, stop before installing the patch proposed in=20 Bug#28597#62, or stop after installing that patch? I hope it means the=20 latter. That patch attempts to implement your suggestion in=20 Bug#28597#32, as quoted below: > > From: Robert Pluim gmail.com> ... > >=20 > > I thought we were discussing making --without-pop be the default even > > if GNU Mailutils are not available, and it's what I'm > > advocating. Paul's patch only did that if they were found. > > If that's what people want, fine with me on Posix platforms, but not > on MS-Windows (where Mailutils are not available, and probably never > will be). From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Resent-From: Eli Zaretskii Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 03 Oct 2017 02:30:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Paul Eggert Cc: nljlistbox2@gmail.com, rpluim@gmail.com, 28597@debbugs.gnu.org, jwiegley@gmail.com Reply-To: Eli Zaretskii Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.150699779622870 (code B ref 28597); Tue, 03 Oct 2017 02:30:01 +0000 Received: (at 28597) by debbugs.gnu.org; 3 Oct 2017 02:29:56 +0000 Received: from localhost ([127.0.0.1]:44813 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dzCy3-0005wo-On for submit@debbugs.gnu.org; Mon, 02 Oct 2017 22:29:55 -0400 Received: from eggs.gnu.org ([208.118.235.92]:40800) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dzCy2-0005wc-8Y for 28597@debbugs.gnu.org; Mon, 02 Oct 2017 22:29:54 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dzCxw-0005o9-Gd for 28597@debbugs.gnu.org; Mon, 02 Oct 2017 22:29:49 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD, URIBL_BLOCKED autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:53393) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dzCxq-0005jc-8Z; Mon, 02 Oct 2017 22:29:42 -0400 Received: from 84.94.185.246.cable.012.net.il ([84.94.185.246]:2506 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1dzCxp-0004Nt-M5; Mon, 02 Oct 2017 22:29:42 -0400 Date: Tue, 03 Oct 2017 05:29:25 +0300 Message-Id: <83shf10xru.fsf@gnu.org> From: Eli Zaretskii In-reply-to: <9f1de57c-91a7-11bd-3db6-14e14026da99@cs.ucla.edu> (message from Paul Eggert on Mon, 2 Oct 2017 16:20:26 -0700) References: <837ewh8x5z.fsf@gnu.org> <87ing17akt.fsf@moondust.localdomain> <834lrl75o6.fsf@gnu.org> <877ewh74oq.fsf@moondust.localdomain> <83mv5d5ngv.fsf@gnu.org> <87fub131om.fsf@moondust.localdomain> <83y3ot1mmi.fsf@gnu.org> <83tvzh1j5n.fsf@gnu.org> <9f1de57c-91a7-11bd-3db6-14e14026da99@cs.ucla.edu> X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -5.0 (-----) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) > Cc: nljlistbox2@gmail.com, jwiegley@gmail.com, 28597@debbugs.gnu.org, > rpluim@gmail.com > From: Paul Eggert > Date: Mon, 2 Oct 2017 16:20:26 -0700 > > > I think we've cut enough slices of this salami, so let's stop, > > Does this mean, stop before installing the patch proposed in > Bug#28597#62, or stop after installing that patch? I hope it means the > latter. The latter, of course. From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Resent-From: Robert Pluim Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 03 Oct 2017 08:10:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Paul Eggert Cc: jwiegley@gmail.com, Eli Zaretskii , 28597@debbugs.gnu.org, nljlistbox2@gmail.com Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.150701816626254 (code B ref 28597); Tue, 03 Oct 2017 08:10:02 +0000 Received: (at 28597) by debbugs.gnu.org; 3 Oct 2017 08:09:26 +0000 Received: from localhost ([127.0.0.1]:45093 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dzIGc-0006pO-BF for submit@debbugs.gnu.org; Tue, 03 Oct 2017 04:09:26 -0400 Received: from mail-wr0-f170.google.com ([209.85.128.170]:53688) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dzIGb-0006p1-31 for 28597@debbugs.gnu.org; Tue, 03 Oct 2017 04:09:25 -0400 Received: by mail-wr0-f170.google.com with SMTP id 54so5688405wrz.10 for <28597@debbugs.gnu.org>; Tue, 03 Oct 2017 01:09:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:references:gmane-reply-to-list:date:in-reply-to :message-id:user-agent:mime-version; bh=6Qe2WZWSIHc8nQK37ADH0SIf60SY9Q1cZeqEnX7g/D4=; b=u3nQuxi3CBzu+7akoB7T1QXyc72RFxPJLps7h7XlZD7TPpDl94gOZUIB8gC86lBhQr AS4e9mu7v4u2xoM+FOWn8Br76LyS1imPOKYg2Xzea5zITqSX0VxB6RGtbRFRGeC6K5At P3LIKjud0Ojw6MyZHn1ww0QtxdJT5qqr3jyqyY7TRlmXSbR8enikv49Dj472XS9dFqM3 52a77Ne5svkLdcobsuKOCBqV59f5ggM0lmkMHi3vmQ9ekSHVP+TJE1HwwHaTwLuQfpQ/ SccHZMJn8u5in/ekHbnm0rMwRQTHnokkOydGlUrsid1yCF6FLGaL8k4CJjzQwk5VvLu4 kRxg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references :gmane-reply-to-list:date:in-reply-to:message-id:user-agent :mime-version; bh=6Qe2WZWSIHc8nQK37ADH0SIf60SY9Q1cZeqEnX7g/D4=; b=Y1W6loT13kk/gp0uMsdhHSl+V+zssZs7kk2GQ4sUM8a8iPtliNDQL63KmLHbSGVCQC 5oM0+IX0k2qVZiNq0elKAtYYBCX7XDvDJ4oH5KiMLAlBfNOTBjnxMpqAnJ9KMDOHaexH 91zWFPOjpzdhmvvzrbOJqPe+hbN2+AqP0aOGRJdwxVkV6mJeha/1eSBvj2ZdHmCbEKlQ YLqrvy3zB7KmOKA5DnJkW0sQw6wgAomWVjLtfRi7M4YFLG3zVoGjodUpe8q4UbhDeR5e Sdp71tQzMRad13AmukmAWGjUhFt+5UFN75H6KJLau3+4k0wmLGtPkKC06/9jeTwoRAXe HRNQ== X-Gm-Message-State: AHPjjUgzA3r9nyWZL6bqnOy4hygiV67wzOZhc8SuLEgMtV8b2xIKyz72 iE0e2K41fnJVCLoUgiqoMf4= X-Google-Smtp-Source: AOwi7QBFjtJz16F6/jJdUfik+qKXuxsRZksc3bGn4hzYOmblngRoAVAGyMUdlGUOexbD5OS5CPdnKQ== X-Received: by 10.223.135.102 with SMTP id 35mr16586438wrz.160.1507018159396; Tue, 03 Oct 2017 01:09:19 -0700 (PDT) Received: from rpluim-ubuntu ([149.5.228.1]) by smtp.gmail.com with ESMTPSA id s196sm8128840wmb.6.2017.10.03.01.09.17 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 03 Oct 2017 01:09:18 -0700 (PDT) From: Robert Pluim References: <837ewh8x5z.fsf@gnu.org> <87r2upd2h5.fsf@gmail.com> <83a81d7666.fsf@gnu.org> <87h8vl1db2.fsf@gmail.com> <873771wm1y.fsf@gmail.com> Gmane-Reply-To-List: yes Date: Tue, 03 Oct 2017 10:09:15 +0200 In-Reply-To: (Paul Eggert's message of "Mon, 2 Oct 2017 11:23:05 -0700") Message-ID: <87vajwvej8.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.60 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -2.8 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.8 (--) Paul Eggert writes: > Thanks for working on this. However, Eli asked for --with-pop to > remain the default on native MS-Windows. Also, I found the newly-added > warnings confusing (though admittedly everything is confusing here > :-). You're right, I thought he was talking only about the Mailutils recommendation, but I misread. > How about the attached patch instead? It does not change the > configure-time warnings. It merely changes the default, so that > --without-pop is now the default on platforms other than native > MS-Windows. Eli wanted to avoid silently changing the default, which is why I worked on creating confusing warnings :-) I'm not wedded to the form, but I think configure should output *something* to warn people about the change in behaviour. Or we go full radical and disable building our own mailutils on non MS-Windows, thus simplifying this mess greatly (we'd have to warn a bit more loudly if GNU Mailutils aren't installed, though) Robert From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Resent-From: nljlistbox2@gmail.com (N. Jackson) Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 03 Oct 2017 14:30:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Paul Eggert Cc: jwiegley@gmail.com, Eli Zaretskii , 28597@debbugs.gnu.org, rpluim@gmail.com Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.150704096511604 (code B ref 28597); Tue, 03 Oct 2017 14:30:02 +0000 Received: (at 28597) by debbugs.gnu.org; 3 Oct 2017 14:29:25 +0000 Received: from localhost ([127.0.0.1]:46417 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dzOCL-000315-8x for submit@debbugs.gnu.org; Tue, 03 Oct 2017 10:29:25 -0400 Received: from mail-io0-f170.google.com ([209.85.223.170]:48093) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dzOCJ-00030t-Rv for 28597@debbugs.gnu.org; Tue, 03 Oct 2017 10:29:24 -0400 Received: by mail-io0-f170.google.com with SMTP id m201so2477421iom.4 for <28597@debbugs.gnu.org>; Tue, 03 Oct 2017 07:29:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version; bh=fAPoNsYx1Bxzqe9XXpGPWaAgDJOjl+1HeNLW+mBY7n0=; b=eCrSf08mQV5LwPWPupTfyGpKHF55H6JUr/oLC/jMF0QAJeBaLs3H8uYj2Uwo6s9Osm oYE+YfH453fg1kMA+lAPpYJtAGSsfhzCAzz19Ov7fGUUJSSbX1qis0dAlbZeCsHUPJqs hIG1hWfEDP7DChe4rCm/1cV37xVfrf5GFTkoq9UYinMMnKxdbk578kbd8VUvwOBLeWYi MEFV2iG19I4/r+BrFtrQQJTcFG3NlR9lhFWPpP5OcMWMrqfiY9DvrTSZyFc241GEyUh/ 9Ev+n1WLlaWFuXW2F7DerpH0PF6Oj1ek9gSXn8Q165NhKACJ1QhD3V6eWZDpRV4hxjY7 TOwA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to :message-id:user-agent:mime-version; bh=fAPoNsYx1Bxzqe9XXpGPWaAgDJOjl+1HeNLW+mBY7n0=; b=lTmr79zlH0TKzWnrkeZvuiVae0vwCqLKLkVg6Rg2WENC4n5HCxPjOSEHd17VYG5VUo JLkm8pWr7OTGl2279f+fX7HsnjcU0xkQf2fTGtFVrIqEH/L50zg/mTUZYDa/ADoAjp+j Q0sedoCyUEdZY/EwUeF6+yBwH/VKvojV11XwCJT8zd94sU4CMuyCskTljhVoblP8E2cR yDUMYZSizicHzqFl5uadSzHNwE9BTd2pUUue4u40z+zGpPWjp87itnD8vjK9Ca1fGcfl WUUaulfFJ1pA2TN4uujToRe6ecye86D9lUFJviti6RzAitgt1ZDmCr6xth0lTYV/e9Fu UuoQ== X-Gm-Message-State: AMCzsaW4WArVd6jrnND0+gyHVpSH4mdr0MfaLleFjcOPHGJPVkGJHJM0 OPd6I10EHCvhJIuJjidD3Vk= X-Google-Smtp-Source: AOwi7QC3gUrQsz35VYrwV2RsWb+IiX/5MwUI8nrLClZsLrvkp44p2Z5Q8e2zUjQ3tN6WNwQQ38nchA== X-Received: by 10.107.164.31 with SMTP id n31mr28829838ioe.46.1507040958166; Tue, 03 Oct 2017 07:29:18 -0700 (PDT) Received: from moondust.localdomain.nodomain.none ([72.143.113.194]) by smtp.gmail.com with ESMTPSA id a31sm3435982itj.7.2017.10.03.07.29.16 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Tue, 03 Oct 2017 07:29:17 -0700 (PDT) From: nljlistbox2@gmail.com (N. Jackson) References: <837ewh8x5z.fsf@gnu.org> <87ing17akt.fsf@moondust.localdomain> <834lrl75o6.fsf@gnu.org> <877ewh74oq.fsf@moondust.localdomain> <83mv5d5ngv.fsf@gnu.org> <87fub131om.fsf@moondust.localdomain> <83y3ot1mmi.fsf@gnu.org> <83tvzh1j5n.fsf@gnu.org> <9f1de57c-91a7-11bd-3db6-14e14026da99@cs.ucla.edu> Date: Tue, 03 Oct 2017 10:29:16 -0400 In-Reply-To: <9f1de57c-91a7-11bd-3db6-14e14026da99@cs.ucla.edu> (Paul Eggert's message of "Mon, 2 Oct 2017 16:20:26 -0700") Message-ID: <87efqkz4n7.fsf@moondust.localdomain> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.60 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -2.0 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.0 (--) At 16:20 -0700 on Monday 2017-10-02, Paul Eggert wrote: > > On 10/02/2017 11:47 AM, Eli Zaretskii wrote: > >> nagging users each time they invoke movemail to fetch via POP3 >> is IMO unacceptable. > > Yes, that suggestion is problematic. Just for the record, I explicitly stated in my suggestion to warm the user (rather than just the builder) that Emacs should _not_ nag the user every time. I was thinking of disabling the commands in question in the case that they will be insecure and prompting along the lines of: You have typed abc, invoking disabled command xyz. Beware: This command retrieves POP3 email via only insecure channels. See [reference to relevant documentation] for more information. Do you want to use this command anyway? You can now type y to try it and enable it (no questions if you use it again). n to cancel--don't try the command, and it remains disabled. SPC to try the command just this once, but leave it disabled. ! to try it, and enable all disabled commands for this session only. This informs the user but only does so once (if they don't want to be told again); after that they need not see the warning ever again. Telling someone something once really cannot be described as "nagging". N. From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Resent-From: Eli Zaretskii Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 03 Oct 2017 14:36:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Robert Pluim Cc: jwiegley@gmail.com, eggert@cs.ucla.edu, 28597@debbugs.gnu.org, nljlistbox2@gmail.com Reply-To: Eli Zaretskii Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.150704130412334 (code B ref 28597); Tue, 03 Oct 2017 14:36:02 +0000 Received: (at 28597) by debbugs.gnu.org; 3 Oct 2017 14:35:04 +0000 Received: from localhost ([127.0.0.1]:46450 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dzOHo-0003Cs-0S for submit@debbugs.gnu.org; Tue, 03 Oct 2017 10:35:04 -0400 Received: from eggs.gnu.org ([208.118.235.92]:37033) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dzOHm-0003Bv-Cl for 28597@debbugs.gnu.org; Tue, 03 Oct 2017 10:35:02 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dzOHg-0003wA-HN for 28597@debbugs.gnu.org; Tue, 03 Oct 2017 10:34:57 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD, URIBL_BLOCKED autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:33843) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dzOHc-0003r3-Sq; Tue, 03 Oct 2017 10:34:52 -0400 Received: from 84.94.185.246.cable.012.net.il ([84.94.185.246]:2775 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1dzOHc-0000iC-A1; Tue, 03 Oct 2017 10:34:52 -0400 Date: Tue, 03 Oct 2017 17:34:37 +0300 Message-Id: <83poa41erm.fsf@gnu.org> From: Eli Zaretskii In-reply-to: <87vajwvej8.fsf@gmail.com> (message from Robert Pluim on Tue, 03 Oct 2017 10:09:15 +0200) References: <837ewh8x5z.fsf@gnu.org> <87r2upd2h5.fsf@gmail.com> <83a81d7666.fsf@gnu.org> <87h8vl1db2.fsf@gmail.com> <873771wm1y.fsf@gmail.com> <87vajwvej8.fsf@gmail.com> X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -5.0 (-----) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) > From: Robert Pluim > Cc: Eli Zaretskii , jwiegley@gmail.com, 28597@debbugs.gnu.org, nljlistbox2@gmail.com > Date: Tue, 03 Oct 2017 10:09:15 +0200 > > I'm not wedded to the form, but I think configure should output > *something* to warn people about the change in behaviour. Or we go > full radical and disable building our own mailutils on non MS-Windows, > thus simplifying this mess greatly (we'd have to warn a bit more > loudly if GNU Mailutils aren't installed, though) Not building movemail if Mailutils are not installed is too harsh, because movemail supports methods other than POP3. From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Resent-From: Robert Pluim Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 03 Oct 2017 14:57:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: nljlistbox2@gmail.com (N. Jackson) Cc: jwiegley@gmail.com, Paul Eggert , 28597@debbugs.gnu.org Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.150704256321534 (code B ref 28597); Tue, 03 Oct 2017 14:57:01 +0000 Received: (at 28597) by debbugs.gnu.org; 3 Oct 2017 14:56:03 +0000 Received: from localhost ([127.0.0.1]:46482 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dzOc7-0005bG-K0 for submit@debbugs.gnu.org; Tue, 03 Oct 2017 10:56:03 -0400 Received: from mail-wm0-f42.google.com ([74.125.82.42]:50704) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dzOc4-0005aj-TT for 28597@debbugs.gnu.org; Tue, 03 Oct 2017 10:56:01 -0400 Received: by mail-wm0-f42.google.com with SMTP id u138so17229482wmu.5 for <28597@debbugs.gnu.org>; Tue, 03 Oct 2017 07:56:00 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:references:gmane-reply-to-list:date:in-reply-to :message-id:user-agent:mime-version; bh=0s3vQhQI8BZztEP0mtJoXuc7H61q2klpRfEozlwKI6A=; b=PLYBn3nFi+sLmU4kFOvRTpCq0QQC5iBWezemnjlzhylqq2tm9O6pSgttORh4jrzfp8 VFx6lPLEDZDnKmQnfcp+C7powINJpxtD4h9aM0k1DRngktbNPG5qBIkHtiAYHfp9svMn Y9pmMAtPnzlO8vei90X28bDWnQHl7Uy0sH7s5pmZQ/T1gDDcn/0+odDZH4NifVXCuwmw +2jVuGuweVDgbMTtjmwargd897iJDJ/Pj2yZhApwyQuiJ8G7I5yStVWWG79bno6ZV4e4 KTB5/nBCXOfe5NLvyDzl7jRonEVbQ/f3l7mb/92MzNGVZw+6GRr8MAYrXJMD9s4/oYje TWcg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references :gmane-reply-to-list:date:in-reply-to:message-id:user-agent :mime-version; bh=0s3vQhQI8BZztEP0mtJoXuc7H61q2klpRfEozlwKI6A=; b=uJ1xJtsIzj7dV4Q7Dpxosoreuip/HnfxD2kuY18FAVUVj5v8+mSNmseCISD4TtA0Mf PbZvTdlSy2sWzDKtmr5eZYVELVYnKm47GuidF2cigLEGYKQrCKlx1/O3uFpUF6/Ryo8L lYhhQTtoV7SKg+PXLr92RkvpYXt5lbd+hhOPnnZeJ8981hqVOdxGCP4U7W/KAqOOXjBU IsHrVGSvB6JGjBntgExgoQH+N86FE0eCLtyWsX/l60Z6XMxNH7UCyahSxAJCgFi3g4bL k+FVadRcgve4Q3ei003WRs9okfeVxuFLnyYWUIrorq9WOaZ9kRLPMVCB55fSjkPTUj8z misg== X-Gm-Message-State: AMCzsaWuVIxjNI5NbwNkA2Ik12qAG3RETnd/wzebxVPIWYk8MbSXggUc kEzeXIx3lZvwr25ltsnhL+TemQmYl/0= X-Google-Smtp-Source: AOwi7QDRtHT4IDdfj7H8AleYKZzWVi59/mwirDapiJgY5h6MLM8nYJoc0GYm0jnHTDnkrBhGfvbDqQ== X-Received: by 10.28.208.129 with SMTP id h123mr5612505wmg.25.1507042554543; Tue, 03 Oct 2017 07:55:54 -0700 (PDT) Received: from rpluim-ubuntu ([149.5.228.1]) by smtp.gmail.com with ESMTPSA id v3sm4016373wra.39.2017.10.03.07.55.52 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 03 Oct 2017 07:55:53 -0700 (PDT) From: Robert Pluim References: <837ewh8x5z.fsf@gnu.org> <87ing17akt.fsf@moondust.localdomain> <834lrl75o6.fsf@gnu.org> <877ewh74oq.fsf@moondust.localdomain> <83mv5d5ngv.fsf@gnu.org> <87fub131om.fsf@moondust.localdomain> <83y3ot1mmi.fsf@gnu.org> <83tvzh1j5n.fsf@gnu.org> <9f1de57c-91a7-11bd-3db6-14e14026da99@cs.ucla.edu> <87efqkz4n7.fsf@moondust.localdomain> Gmane-Reply-To-List: yes Date: Tue, 03 Oct 2017 16:55:51 +0200 In-Reply-To: <87efqkz4n7.fsf@moondust.localdomain> (N. Jackson's message of "Tue, 03 Oct 2017 10:29:16 -0400") Message-ID: <87h8vgl1qg.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.60 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 1.0 (+) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.0 (/) nljlistbox2@gmail.com (N. Jackson) writes: > At 16:20 -0700 on Monday 2017-10-02, Paul Eggert wrote: >> >> On 10/02/2017 11:47 AM, Eli Zaretskii wrote: >> >>> nagging users each time they invoke movemail to fetch via POP3 >>> is IMO unacceptable. >> >> Yes, that suggestion is problematic. > > Just for the record, I explicitly stated in my suggestion to warm > the user (rather than just the builder) that Emacs should _not_ nag > the user every time. > > I was thinking of disabling the commands in question in the case > that they will be insecure and prompting along the lines of: > > You have typed abc, invoking disabled command xyz. > Except that there's not a single specific command that retrieves mail via POP3, it's wired into the guts of rmail, and I'd rather not touch that. This is all starting to sound like overkill compared to simply warning the builder, especially since people who package emacs can easily add GNU Mailutils as a dependency, and people who build their own emacs should read and react to the warning messages that I proposed earlier. Robert From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Resent-From: Robert Pluim Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 03 Oct 2017 15:04:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Eli Zaretskii Cc: jwiegley@gmail.com, eggert@cs.ucla.edu, 28597@debbugs.gnu.org, nljlistbox2@gmail.com Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.150704304122336 (code B ref 28597); Tue, 03 Oct 2017 15:04:02 +0000 Received: (at 28597) by debbugs.gnu.org; 3 Oct 2017 15:04:01 +0000 Received: from localhost ([127.0.0.1]:46487 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dzOjp-0005oC-Cm for submit@debbugs.gnu.org; Tue, 03 Oct 2017 11:04:01 -0400 Received: from mail-wm0-f47.google.com ([74.125.82.47]:46306) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dzOjn-0005nz-Ov for 28597@debbugs.gnu.org; Tue, 03 Oct 2017 11:04:00 -0400 Received: by mail-wm0-f47.google.com with SMTP id m72so17397413wmc.1 for <28597@debbugs.gnu.org>; Tue, 03 Oct 2017 08:03:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:references:gmane-reply-to-list:date:in-reply-to :message-id:user-agent:mime-version; bh=L/rsLndFuDJfb4VmjkTqmQbMZLjR0IjOnOUPhwscqe8=; b=ubyDZHthwvMqbj9oFU1QR10XBa+KVqopOgV6JU1C+BfpS4JrF7VAz94ioAHI1HdgOh X3rkLxYIjEgtcAS1bNPq39ZwrvCEtImppz1lRL19RlZ/vkjIWUUzugoBbYzWhviJpfy9 w6B+irQPMC/WTlK5ebmI+U92fcAEpmMlknIes+uHDLYskjMRu67LsriBE24Xn47dCJXe Pt3bm+9bFfe99BikEQkPqoVPIpr71OBVjg+YSFIbW7HkXICRvBKDUmKu/6RHCF1Dmf7q koO7ZELT5yfs1ckudr4I7ekkEVetj7/xO9iiz/nQ//nh5hXi4N106oytLV/xrtp8VgDc nTuw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references :gmane-reply-to-list:date:in-reply-to:message-id:user-agent :mime-version; bh=L/rsLndFuDJfb4VmjkTqmQbMZLjR0IjOnOUPhwscqe8=; b=Vn+tbnD0EEypxJk5nP/7CO8rJ78InMQwBB0lUlAySvOZvwXrmWQZsVfBlj81RwrTV0 rtarZoGj9dcW3dYLzc1k/OTLaGRsm9PGjh7mrSQbQOra32rZvpNLf+rmqA11lA/gbfNE T/RmYBiXfS6HDMHzAEJELelN2ewHRlvVKbkLuA34XXItAffSuclrSAmV/xyuHBI++kPd llhwsylpJBwwksu8qC6Jip6fni7PeCf4cK4iGe6d5OVxUxL9wzjYUxh72S145wV017L3 DmSuLgcbn27o0SXIKCAC/Ulyv5XCAj053AUeIpn4hQoSGAxmEHu/l70FWFS50it6FdHp veqw== X-Gm-Message-State: AHPjjUgzgvF9VG77mfOhewUi3epo86Og/hYF5A5mO6DA+fRzUUj5uMGx yoQMlnyCNOOdKJXWApVDBlE= X-Google-Smtp-Source: AOwi7QBXC3PofROB/evIgt2RuMyx0lbPFfC6mQNcedlIZVWk+Dvuyirm9BLct2o/HsRm4VI6tQshUw== X-Received: by 10.80.175.165 with SMTP id h34mr24897325edd.292.1507043034075; Tue, 03 Oct 2017 08:03:54 -0700 (PDT) Received: from rpluim-ubuntu ([149.5.228.1]) by smtp.gmail.com with ESMTPSA id e29sm13384932edd.28.2017.10.03.08.03.49 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 03 Oct 2017 08:03:51 -0700 (PDT) From: Robert Pluim References: <837ewh8x5z.fsf@gnu.org> <87r2upd2h5.fsf@gmail.com> <83a81d7666.fsf@gnu.org> <87h8vl1db2.fsf@gmail.com> <873771wm1y.fsf@gmail.com> <87vajwvej8.fsf@gmail.com> <83poa41erm.fsf@gnu.org> Gmane-Reply-To-List: yes Date: Tue, 03 Oct 2017 17:03:48 +0200 In-Reply-To: <83poa41erm.fsf@gnu.org> (Eli Zaretskii's message of "Tue, 03 Oct 2017 17:34:37 +0300") Message-ID: <87d164l1d7.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.60 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 1.5 (+) X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: Eli Zaretskii writes: >> From: Robert Pluim >> Cc: Eli Zaretskii , jwiegley@gmail.com, 28597@debbugs.gnu.org, nljlistbox2@gmail.com >> Date: Tue, 03 Oct 2017 10:09:15 +0200 >> >> I'm not wedded to the form, but I think configure should output >> *something* to warn people about the change in behaviour. Or we go >> full radical and disable building our own mailutils on non MS-Windows, >> thus simplifying this mess greatly (we'd have to warn a bit more >> loudly if GNU Mailutils aren't installed, though) > > Not building movemail if Mailutils are not installed is too harsh, > because movemail supports methods other than POP3. [...] Content analysis details: (1.5 points, 10.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: gnu.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.47 listed in dnsbl.sorbs.net] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.47 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (rpluim[at]gmail.com) -0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3) [74.125.82.47 listed in wl.mailspike.net] 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid -0.0 RCVD_IN_MSPIKE_WL Mailspike good senders 1.0 FREEMAIL_REPLY From and body contain different freemails X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.5 (/) Eli Zaretskii writes: >> From: Robert Pluim >> Cc: Eli Zaretskii , jwiegley@gmail.com, 28597@debbugs.gnu.org, nljlistbox2@gmail.com >> Date: Tue, 03 Oct 2017 10:09:15 +0200 >> >> I'm not wedded to the form, but I think configure should output >> *something* to warn people about the change in behaviour. Or we go >> full radical and disable building our own mailutils on non MS-Windows, >> thus simplifying this mess greatly (we'd have to warn a bit more >> loudly if GNU Mailutils aren't installed, though) > > Not building movemail if Mailutils are not installed is too harsh, > because movemail supports methods other than POP3. Does GNU Mailutils not support those same methods? I'm assuming it's also maintained more than our movemail. Robert From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Resent-From: Eli Zaretskii Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 03 Oct 2017 15:43:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Robert Pluim Cc: jwiegley@gmail.com, eggert@cs.ucla.edu, 28597@debbugs.gnu.org, nljlistbox2@gmail.com Reply-To: Eli Zaretskii Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.150704536326380 (code B ref 28597); Tue, 03 Oct 2017 15:43:01 +0000 Received: (at 28597) by debbugs.gnu.org; 3 Oct 2017 15:42:43 +0000 Received: from localhost ([127.0.0.1]:46565 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dzPLG-0006rQ-Ud for submit@debbugs.gnu.org; Tue, 03 Oct 2017 11:42:43 -0400 Received: from eggs.gnu.org ([208.118.235.92]:33885) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dzPLG-0006rA-1l for 28597@debbugs.gnu.org; Tue, 03 Oct 2017 11:42:42 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dzPLA-0001kS-8i for 28597@debbugs.gnu.org; Tue, 03 Oct 2017 11:42:37 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD, URIBL_BLOCKED autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:35132) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dzPL5-0001jg-Gc; Tue, 03 Oct 2017 11:42:31 -0400 Received: from 84.94.185.246.cable.012.net.il ([84.94.185.246]:2812 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1dzPL4-0003Mu-Ty; Tue, 03 Oct 2017 11:42:31 -0400 Date: Tue, 03 Oct 2017 18:42:15 +0300 Message-Id: <83bmlo1bmw.fsf@gnu.org> From: Eli Zaretskii In-reply-to: <87d164l1d7.fsf@gmail.com> (message from Robert Pluim on Tue, 03 Oct 2017 17:03:48 +0200) References: <837ewh8x5z.fsf@gnu.org> <87r2upd2h5.fsf@gmail.com> <83a81d7666.fsf@gnu.org> <87h8vl1db2.fsf@gmail.com> <873771wm1y.fsf@gmail.com> <87vajwvej8.fsf@gmail.com> <83poa41erm.fsf@gnu.org> <87d164l1d7.fsf@gmail.com> X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -5.0 (-----) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) > From: Robert Pluim > Cc: jwiegley@gmail.com, eggert@cs.ucla.edu, 28597@debbugs.gnu.org, nljlistbox2@gmail.com > Gmane-Reply-To-List: yes > Date: Tue, 03 Oct 2017 17:03:48 +0200 > > > Not building movemail if Mailutils are not installed is too harsh, > > because movemail supports methods other than POP3. > > Does GNU Mailutils not support those same methods? It does, but I was talking about the case where Mailutils is NOT installed. If you don't build movemail in that case, you leave users unable to fetch mail even if they don't use POP3. From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Resent-From: Eli Zaretskii Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 03 Oct 2017 15:45:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: nljlistbox2@gmail.com (N. Jackson) Cc: jwiegley@gmail.com, rpluim@gmail.com, eggert@cs.ucla.edu, 28597@debbugs.gnu.org Reply-To: Eli Zaretskii Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.150704544726544 (code B ref 28597); Tue, 03 Oct 2017 15:45:01 +0000 Received: (at 28597) by debbugs.gnu.org; 3 Oct 2017 15:44:07 +0000 Received: from localhost ([127.0.0.1]:46569 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dzPMd-0006u4-8j for submit@debbugs.gnu.org; Tue, 03 Oct 2017 11:44:07 -0400 Received: from eggs.gnu.org ([208.118.235.92]:34524) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dzPMb-0006tU-Ts for 28597@debbugs.gnu.org; Tue, 03 Oct 2017 11:44:06 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dzPMS-0002Ky-BK for 28597@debbugs.gnu.org; Tue, 03 Oct 2017 11:44:00 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD, URIBL_BLOCKED autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:35152) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dzPMN-0002J9-84; Tue, 03 Oct 2017 11:43:51 -0400 Received: from 84.94.185.246.cable.012.net.il ([84.94.185.246]:2813 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1dzPMM-0003Rw-Nb; Tue, 03 Oct 2017 11:43:51 -0400 Date: Tue, 03 Oct 2017 18:43:35 +0300 Message-Id: <83a8181bko.fsf@gnu.org> From: Eli Zaretskii In-reply-to: <87efqkz4n7.fsf@moondust.localdomain> (nljlistbox2@gmail.com) References: <837ewh8x5z.fsf@gnu.org> <87ing17akt.fsf@moondust.localdomain> <834lrl75o6.fsf@gnu.org> <877ewh74oq.fsf@moondust.localdomain> <83mv5d5ngv.fsf@gnu.org> <87fub131om.fsf@moondust.localdomain> <83y3ot1mmi.fsf@gnu.org> <83tvzh1j5n.fsf@gnu.org> <9f1de57c-91a7-11bd-3db6-14e14026da99@cs.ucla.edu> <87efqkz4n7.fsf@moondust.localdomain> X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -5.0 (-----) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) > From: nljlistbox2@gmail.com (N. Jackson) > Cc: Eli Zaretskii , jwiegley@gmail.com, 28597@debbugs.gnu.org, rpluim@gmail.com > Date: Tue, 03 Oct 2017 10:29:16 -0400 > > I was thinking of disabling the commands in question in the case > that they will be insecure and prompting along the lines of: > > You have typed abc, invoking disabled command xyz. > > Beware: This command retrieves POP3 email via only insecure > channels. See [reference to relevant documentation] for more > information. > > Do you want to use this command anyway? > > You can now type > y to try it and enable it (no questions if you use it again). > n to cancel--don't try the command, and it remains disabled. > SPC to try the command just this once, but leave it disabled. > ! to try it, and enable all disabled commands for this session only. > > This informs the user but only does so once (if they don't want to > be told again); after that they need not see the warning ever > again. Telling someone something once really cannot be described > as "nagging". I don't see how can we do such a thing, since movemail is a command-line utility written in C, not a Lisp program. People can (and some do) invoke movemail from the shell prompt. From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Resent-From: Paul Eggert Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 03 Oct 2017 22:48:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Robert Pluim Cc: jwiegley@gmail.com, Eli Zaretskii , 28597@debbugs.gnu.org, nljlistbox2@gmail.com Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.150707085312415 (code B ref 28597); Tue, 03 Oct 2017 22:48:02 +0000 Received: (at 28597) by debbugs.gnu.org; 3 Oct 2017 22:47:33 +0000 Received: from localhost ([127.0.0.1]:46980 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dzVyL-0003E5-5Z for submit@debbugs.gnu.org; Tue, 03 Oct 2017 18:47:33 -0400 Received: from zimbra.cs.ucla.edu ([131.179.128.68]:41960) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dzVyF-0003Dm-SA for 28597@debbugs.gnu.org; Tue, 03 Oct 2017 18:47:28 -0400 Received: from localhost (localhost [127.0.0.1]) by zimbra.cs.ucla.edu (Postfix) with ESMTP id 0BA65160D98; Tue, 3 Oct 2017 15:47:18 -0700 (PDT) Received: from zimbra.cs.ucla.edu ([127.0.0.1]) by localhost (zimbra.cs.ucla.edu [127.0.0.1]) (amavisd-new, port 10032) with ESMTP id 76gcz7_85LL7; Tue, 3 Oct 2017 15:47:16 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by zimbra.cs.ucla.edu (Postfix) with ESMTP id E8C6C160E11; Tue, 3 Oct 2017 15:47:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at zimbra.cs.ucla.edu Received: from zimbra.cs.ucla.edu ([127.0.0.1]) by localhost (zimbra.cs.ucla.edu [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id Ze0H1D4ZYsnS; Tue, 3 Oct 2017 15:47:15 -0700 (PDT) Received: from Penguin.CS.UCLA.EDU (Penguin.CS.UCLA.EDU [131.179.64.200]) by zimbra.cs.ucla.edu (Postfix) with ESMTPSA id C73CE160D98; Tue, 3 Oct 2017 15:47:15 -0700 (PDT) References: <837ewh8x5z.fsf@gnu.org> <87r2upd2h5.fsf@gmail.com> <83a81d7666.fsf@gnu.org> <87h8vl1db2.fsf@gmail.com> <873771wm1y.fsf@gmail.com> <87vajwvej8.fsf@gmail.com> From: Paul Eggert Organization: UCLA Computer Science Department Message-ID: <0648ed49-af37-e64c-9b9b-33f290d35dca@cs.ucla.edu> Date: Tue, 3 Oct 2017 15:47:15 -0700 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.3.0 MIME-Version: 1.0 In-Reply-To: <87vajwvej8.fsf@gmail.com> Content-Type: multipart/mixed; boundary="------------38EC9992997778A45D891A50" Content-Language: en-US X-Spam-Score: -0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.0 (/) This is a multi-part message in MIME format. --------------38EC9992997778A45D891A50 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit On 10/03/2017 01:09 AM, Robert Pluim wrote: > I think configure should output > *something* to warn people about the change in behaviour. That's easy and harmless enough, so I installed the attached into emacs-26, after installing the patch I previously mentioned in this thread. --------------38EC9992997778A45D891A50 Content-Type: text/x-patch; name="0001-Warn-if-without-pop-is-now-the-default.patch" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="0001-Warn-if-without-pop-is-now-the-default.patch" >From bbc889f07fa1cc516480d5958ece89997c87cdeb Mon Sep 17 00:00:00 2001 From: Paul Eggert Date: Tue, 3 Oct 2017 15:42:10 -0700 Subject: [PATCH] Warn if --without-pop is now the default * configure.ac (with_pop): Set to no-by-default if defaulting to "no". Warn about the change if defaulting to "no". Update URLs. --- configure.ac | 19 ++++++++++--------- 1 file changed, 10 insertions(+), 9 deletions(-) diff --git a/configure.ac b/configure.ac index 3feac73bed..d92b95cb54 100644 --- a/configure.ac +++ b/configure.ac @@ -259,7 +259,7 @@ AC_DEFUN [], [case $host in *-mingw*) with_pop=yes;; - *) with_pop=no;; + *) with_pop=no-by-default;; esac]) if test "$with_pop" = yes; then AC_DEFINE(MAIL_USE_POP) @@ -1320,7 +1320,7 @@ AC_DEFUN dnl LD_SWITCH_SYSTEM_TEMACS. That is: dnl * inappropriate, as LDFLAGS is a user option but this is essential. dnl Eg "make LDFLAGS=... all" could run into problems, -dnl http://bugs.debian.org/684788 +dnl https://bugs.debian.org/684788 dnl * unnecessary, since temacs is the only thing that actually needs it. dnl Indeed this is where it was originally, prior to: dnl https://lists.gnu.org/archive/html/emacs-pretest-bug/2004-03/msg00170.html @@ -1399,10 +1399,6 @@ AC_DEFUN # The resulting binary has a complete symbol table, and is better # for debugging and other observability tools (debuggers, pstack, etc). # - # If you encounter a problem using dldump(), please consider sending - # a message to the OpenSolaris tools-linking mailing list: - # http://mail.opensolaris.org/mailman/listinfo/tools-linking - # # It is likely that dldump() works with older Solaris too, but this has # not been tested, so for now this change is for Solaris 10 or newer. UNEXEC_OBJ=unexsol.o @@ -2651,7 +2647,7 @@ AC_DEFUN closing open displays. This is no problem if you just use one display, but if you use more than one and close one of them Emacs may crash. - See http://bugzilla.gnome.org/show_bug.cgi?id=85715]]) + See https://bugzilla.gnome.org/show_bug.cgi?id=85715]]) fi fi @@ -4464,7 +4460,6 @@ AC_DEFUN case $opsys in dnl SIGIO exists, but the feature doesn't work in the way Emacs needs. - dnl See eg . hpux* | nacl | openbsd | sol2* | unixware ) emacs_broken_SIGIO=yes ;; @@ -5575,6 +5570,12 @@ m4_define AC_MSG_WARN([This configuration installs a 'movemail' program that retrieves POP3 email via only insecure channels. To omit insecure POP3, you can use '$0 --without-pop'.]) + elif test "$with_pop" = no-by-default; then + AC_MSG_WARN([This configuration installs a 'movemail' program +that does not retrieve POP3 email. By default, Emacs 25 and earlier +installed a 'movemail' program that retrieved POP3 email via only +insecure channels, a practice that is no longer recommended but that +you can continue to support by using '$0 --with-pop'.]) fi case $opsys in @@ -5586,7 +5587,7 @@ m4_define case `(movemail --version) 2>/dev/null` in *Mailutils*) ;; *) emacs_fix_movemail="install GNU Mailutils - and $emacs_fix_movemail";; + and $emacs_fix_movemail";; esac AC_MSG_NOTICE([You might want to $emacs_fix_movemail.]);; esac -- 2.13.6 --------------38EC9992997778A45D891A50-- From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Resent-From: Robert Pluim Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Wed, 04 Oct 2017 07:15:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Paul Eggert Cc: jwiegley@gmail.com, 28597@debbugs.gnu.org, nljlistbox2@gmail.com Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.15071012565841 (code B ref 28597); Wed, 04 Oct 2017 07:15:02 +0000 Received: (at 28597) by debbugs.gnu.org; 4 Oct 2017 07:14:16 +0000 Received: from localhost ([127.0.0.1]:47359 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dzdsl-0001W9-SM for submit@debbugs.gnu.org; Wed, 04 Oct 2017 03:14:16 -0400 Received: from mail-wm0-f52.google.com ([74.125.82.52]:44743) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dzdsk-0001Vt-9i for 28597@debbugs.gnu.org; Wed, 04 Oct 2017 03:14:14 -0400 Received: by mail-wm0-f52.google.com with SMTP id 196so8383721wma.1 for <28597@debbugs.gnu.org>; Wed, 04 Oct 2017 00:14:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:references:gmane-reply-to-list:date:in-reply-to :message-id:user-agent:mime-version; bh=pbEosCXI2SiBt0FtORZcwB2qf67Rg8o9fd7bnbzIaLE=; b=Mz155Z+glCniVsi2APfHSHHjr+hSsKTzegkkBGtjOulMZ2R0KCJxgHpa/YKRvXO4VA 8Jy4RTpszTnF4PoebyQRjTWLyaEAJYntJLnT7ANRXmgME7bmNxam1aXpxpSsGlqgG97y /CdLWqHYX2LRMBeVEvC+Nt7EqU6uO+ehQxW2fTN3ON3uR/q/VQbvHpvbEQyZkFuh/xNw nyC935zraIiDS3Sa+uC+i8AnLkPfFy29gMX7INFPdqFtsgplzr+nkkr58Whv8RmpaHzj 4JSqPoZnea5fOchtpJZHOz9K17gDS5gsAx3jz0Bx8gPWZsG9MB8p2GO9KFgAk08390L0 D+0g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references :gmane-reply-to-list:date:in-reply-to:message-id:user-agent :mime-version; bh=pbEosCXI2SiBt0FtORZcwB2qf67Rg8o9fd7bnbzIaLE=; b=bxWoBp+PZk+i1SE9/vLFbbH7R+yIPBI89h+uvp3GrQIRCsYfD9cmKBbAApxV8uYweG +f6ZuqWEmKt+LTpjW2wxuyV6SQrRv7KUhU3VYqn18OGSnPqvEDWodrRspohVHBvuZjbb HiZsrL8p7G1afBQQOdcEOJst82Rtx5MSwDpozKzlIm6UI9F2Ll12JFNsaiJI5FIarGED n5PvZlutF/A36gWRMFTol5lz+SD3czn54d6UjLv3+tChAD3KFSjwp4uuCsidqb/locsB dJwoggJKWeD5xL4e5s24tQT91HqgkoAns9cX2tiT0eO+JEHonDbHd/ZPNAnPAmR5nLwv 1F6A== X-Gm-Message-State: AHPjjUjWUx2+lqECaexfIx9CWONsF5ZgMu70WNNCkpWAAXwowPq0O/N1 Oqea6hvjErU1MGsA+Ci7rms= X-Google-Smtp-Source: AOwi7QDyzv+0Lnh8IULY/dJt+TI30Q1eBZs7q01p0+SbEDnRpf3QIj/6wR5MRWhiZff5JbKWA8k4GA== X-Received: by 10.80.178.36 with SMTP id o33mr27782417edd.116.1507101248357; Wed, 04 Oct 2017 00:14:08 -0700 (PDT) Received: from rpluim-ubuntu ([149.5.228.1]) by smtp.gmail.com with ESMTPSA id a99sm11891400edf.54.2017.10.04.00.14.07 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 04 Oct 2017 00:14:07 -0700 (PDT) From: Robert Pluim References: <837ewh8x5z.fsf@gnu.org> <87r2upd2h5.fsf@gmail.com> <83a81d7666.fsf@gnu.org> <87h8vl1db2.fsf@gmail.com> <873771wm1y.fsf@gmail.com> <87vajwvej8.fsf@gmail.com> <0648ed49-af37-e64c-9b9b-33f290d35dca@cs.ucla.edu> Gmane-Reply-To-List: yes Date: Wed, 04 Oct 2017 09:14:06 +0200 In-Reply-To: <0648ed49-af37-e64c-9b9b-33f290d35dca@cs.ucla.edu> (Paul Eggert's message of "Tue, 3 Oct 2017 15:47:15 -0700") Message-ID: <871smjl70h.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.60 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.5 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.5 (/) Paul Eggert writes: > On 10/03/2017 01:09 AM, Robert Pluim wrote: >> I think configure should output >> *something* to warn people about the change in behaviour. > > That's easy and harmless enough, so I installed the attached into > emacs-26, after installing the patch I previously mentioned in this > thread. I have some minor thoughts about the wording of the warning, but nothing worth another commit. Looks good to me. Robert From unknown Mon Jun 23 06:03:35 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Resent-From: Noam Postavsky Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Mon, 16 Oct 2017 02:35:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Robert Pluim Cc: jwiegley@gmail.com, Paul Eggert , 28597@debbugs.gnu.org, nljlistbox2@gmail.com Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.150812129326019 (code B ref 28597); Mon, 16 Oct 2017 02:35:01 +0000 Received: (at 28597) by debbugs.gnu.org; 16 Oct 2017 02:34:53 +0000 Received: from localhost ([127.0.0.1]:42202 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1e3vEz-0006lW-0r for submit@debbugs.gnu.org; Sun, 15 Oct 2017 22:34:53 -0400 Received: from mail-io0-f181.google.com ([209.85.223.181]:45430) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1e3vEx-0006lB-8t; Sun, 15 Oct 2017 22:34:51 -0400 Received: by mail-io0-f181.google.com with SMTP id i38so14483701iod.2; Sun, 15 Oct 2017 19:34:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=sender:from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version; bh=3WRju9Ua7AfWgOA1cUO236fMQZ1W5BrLHknjgljHYAc=; b=a8gIMur1QgJmvHgNURnDekhSzAeO1Dr2SgptdH5HiF78xoh8CG8IvV3j5U+Duz9kpk PTt8WgQbi5VV6fSHEqAaY5H4NLVV7luNVa2yQ+s29dFV/GoVn5Ohi6Uv7phfAQxF9Wxv b8fGKFQVrTkq6UjRUtN9yauJoSI+hsjrgTFM+sejTp+Qg0Pg9+8hJyP/r1E5RB4yvwAE ap52NVqL/2wHrA3rxCPZ9jFWymPYpBChQUQ4icy3aj4JNnHNdhDz7Vkpho71BUM2zayv g2GrALOKoCH6fKLfKciB3lpjdF8dQ6r1hVTzPq12BfAK9p42uN+m1fMQSS7GV7MTESIW ZEKw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:sender:from:to:cc:subject:references:date :in-reply-to:message-id:user-agent:mime-version; bh=3WRju9Ua7AfWgOA1cUO236fMQZ1W5BrLHknjgljHYAc=; b=JiPv9aMit8a51QrCbqYR0IgfE2kae5y/1Pje+d67DKR5L80DAqxxaZFwGgh98wRkgy idfAiVo2JaCTSFzAyahEHYPkfWcMsyhS5tfbMF94YIibpM28RmmdTZ6eo9vDOMOgZxoS gTgryaNIkQnFZANp5l0mjoBeuV1gyhKbXzXuQLZQRY8InRXoAu54x+91z1fAmbER1L17 nKPHSzYVISnUWJZ8+SojcaQ9g5+w8C/tsyXTPe8eIb91JbgMDF2VfvqlqLmFspNRUqXf DjqKZR6tQQxDgXczGC7dTXpR7oSgguWaRp+K2LvkNGDpaT1hbO3zRN22lvsBX6RZKe2u 9LHw== X-Gm-Message-State: AMCzsaXASotiCLnn2E0r/xJMfUBtdMk0+cInQubrKJQjnq0W+HPobRNP ssr+ncv9VfxakRE5xjRbHXFmwfoz X-Google-Smtp-Source: AOwi7QCKRiY25JrYG8x8FAFYCgLe06Zynk3qkB8yrNV8sXrCg97F3lpjbjNFd86aGvBsNEsnx4gaWw== X-Received: by 10.107.171.71 with SMTP id u68mr10456599ioe.150.1508121285447; Sun, 15 Oct 2017 19:34:45 -0700 (PDT) Received: from zebian ([45.2.119.34]) by smtp.googlemail.com with ESMTPSA id y16sm3371010ita.11.2017.10.15.19.34.43 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Sun, 15 Oct 2017 19:34:44 -0700 (PDT) From: Noam Postavsky References: <837ewh8x5z.fsf@gnu.org> <87r2upd2h5.fsf@gmail.com> <83a81d7666.fsf@gnu.org> <87h8vl1db2.fsf@gmail.com> <873771wm1y.fsf@gmail.com> <87vajwvej8.fsf@gmail.com> <0648ed49-af37-e64c-9b9b-33f290d35dca@cs.ucla.edu> <871smjl70h.fsf@gmail.com> Date: Sun, 15 Oct 2017 22:34:43 -0400 In-Reply-To: <871smjl70h.fsf@gmail.com> (Robert Pluim's message of "Wed, 04 Oct 2017 09:14:06 +0200") Message-ID: <87zi8rhlbw.fsf@users.sourceforge.net> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.90 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -2.1 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.1 (--) close 28597 quit Robert Pluim writes: > Paul Eggert writes: > >> On 10/03/2017 01:09 AM, Robert Pluim wrote: >>> I think configure should output >>> *something* to warn people about the change in behaviour. >> >> That's easy and harmless enough, so I installed the attached into >> emacs-26, after installing the patch I previously mentioned in this >> thread. > > I have some minor thoughts about the wording of the warning, but > nothing worth another commit. Looks good to me. I guess there's nothing more to do here, closing.