GNU bug report logs - #28597
26.0.60; [Security] Configure should use --without-pop by default

Previous Next

Full log

Message #8 received at 28597 <at> debbugs.gnu.org (full text, mbox):

From: John Wiegley <jwiegley <at> gmail.com>
To: nljlistbox2 <at> gmail.com (N. Jackson)
Cc: Eli Zaretskii <eliz <at> gnu.org>, 28597 <at> debbugs.gnu.org,
 Richard Stallman <rms <at> gnu.org>
Subject: Re: bug#28597: 26.0.60;
 [Security] Configure should use --without-pop by default
Date: Mon, 25 Sep 2017 08:21:40 -0700

>>>>> "NJ" == N Jackson <nljlistbox2 <at> gmail.com> writes:

NJ> Configure issues the following warning:
NJ>   configure: WARNING: This configuration installs a 'movemail' program
NJ>   that retrieves POP3 email via only insecure channels.
NJ>   To omit insecure POP3, you can use './configure --without-pop'.

NJ> If the warning is true, then --without-pop should be the default, and
NJ> users should have to explicitly request an insecure Emacs with --with-pop.

You are requesting a change in behavior that is exceedingly old, so I would
like to hear from others what they think about making a change like this.
Given how much less of a thing POP is becoming over the years, I'd be in favor
of changing the default here.

-- 
John Wiegley                  GPG fingerprint = 4710 CF98 AF9B 327B B80F
http://newartisans.com                          60E1 46C4 BD1A 7AC1 4BA2

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.