GNU bug report logs - #28597
26.0.60; [Security] Configure should use --without-pop by default

Previous Next

Full log

View this message in rfc822 format

From: Eli Zaretskii <eliz <at> gnu.org>
To: Paul Eggert <eggert <at> cs.ucla.edu>
Cc: nljlistbox2 <at> gmail.com, rpluim <at> gmail.com, 28597 <at> debbugs.gnu.org, jwiegley <at> gmail.com
Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default
Date: Mon, 02 Oct 2017 21:47:32 +0300

> Cc: jwiegley <at> gmail.com, 28597 <at> debbugs.gnu.org, rpluim <at> gmail.com
> From: Paul Eggert <eggert <at> cs.ucla.edu>
> Date: Mon, 2 Oct 2017 11:00:47 -0700
> 
> Users accustomed to other email clients are likely to expect that Emacs 
> "pop:whatever" will do something similar.

I'm dubious.  And I don't see how setting up other MUA is of any use
here, because we also use an encrypted POP3 connection
_if_it's_available_, e.g. via Mailutils, Gnus, etc.

But nagging users each time they invoke movemail to fetch via POP3 is
IMO unacceptable.  I'm sick and tired of similar nagging from Firefox,
and I definitely will object that Emacs behaves the same.  We
shouldn't patronize our users to that degree.  Let the Emacs packagers
worry about making their distributions more secure e,g, by depending
on Mailutils.

Anyway, I think we've cut enough slices of this salami, so let's stop,
and let's leave those who want to use POP3 nonetheless to their
devices.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.