aboutsummaryrefslogtreecommitdiffstats
path: root/NEWS
diff options
context:
space:
mode:
authorMatthias Andree <matthias.andree@gmx.de>2021-08-26 23:53:14 +0200
committerMatthias Andree <matthias.andree@gmx.de>2021-08-26 23:53:14 +0200
commite7199006808bb19f58d232da02172ee820d2d83e (patch)
treed06c01279e336dcd9a022500f7499fb185180b6a /NEWS
parentb82c3ccb65e3279996a690ebf577263d7730e0b3 (diff)
downloadfetchmail-e7199006808bb19f58d232da02172ee820d2d83e.tar.gz
fetchmail-e7199006808bb19f58d232da02172ee820d2d83e.tar.bz2
fetchmail-e7199006808bb19f58d232da02172ee820d2d83e.zip
SECURITY: IMAP: --auth ssh no longer prevents STARTTLS
Diffstat (limited to 'NEWS')
-rw-r--r--NEWS1
1 files changed, 1 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index 2d51b6e7..9ab3f065 100644
--- a/NEWS
+++ b/NEWS
@@ -97,6 +97,7 @@ fetchmail-6.4.22 (not yet released):
TLS is better without STARTTLS - A Security Analysis of STARTTLS in the Email
Context" by Damian Poddebniak, Fabian Ising, Hanno Böck, and Sebastian
Schinzel. The paper did not mention fetchmail.
+* On IMAP connections, --auth ssh no longer prevents STARTTLS negotiation.
--------------------------------------------------------------------------------
fetchmail-6.4.21 (released 2021-08-09, 30042 LoC):