aboutsummaryrefslogtreecommitdiffstats
path: root/design-notes.html
diff options
context:
space:
mode:
authorMatthias Andree <matthias.andree@gmx.de>2019-08-19 21:30:39 +0200
committerMatthias Andree <matthias.andree@gmx.de>2019-08-19 21:31:49 +0200
commit916abfe741d97532ceacd834c2a5229f0a67c3c5 (patch)
tree49663adb2035c1e449b7babc3490eea6f5980bdf /design-notes.html
parent86b77d1b7f01a4edacc1d2491b4d3050d1edb680 (diff)
downloadfetchmail-916abfe741d97532ceacd834c2a5229f0a67c3c5.tar.gz
fetchmail-916abfe741d97532ceacd834c2a5229f0a67c3c5.tar.bz2
fetchmail-916abfe741d97532ceacd834c2a5229f0a67c3c5.zip
Update documentation.
Diffstat (limited to 'design-notes.html')
-rw-r--r--design-notes.html12
1 files changed, 5 insertions, 7 deletions
diff --git a/design-notes.html b/design-notes.html
index 4aaba5cb..fc4a2c3b 100644
--- a/design-notes.html
+++ b/design-notes.html
@@ -26,7 +26,8 @@
<h2>Introduction</h2>
-<p>This document is supposed to complement <a
+<p>This document's contents were last updated in 2006, around fetchmail 6.3.4/6.3.5 time.
+It is supposed to complement <a
href="esrs-design-notes.html">Eric S. Raymond's (ESR's)
design notes.</a> The new maintainers don't agree with some of the decisions
ESR made previously, and the differences and new directions will be laid
@@ -35,12 +36,9 @@ the necessary code revisions have been made.</p>
<h2>Security</h2>
-<p>Fetchmail was handed over in a pretty poor shape, security-wise. It will
-happily talk to the network with root privileges, use sscanf() to read
-remotely received data into fixed-length stack-based buffers without
-length limitation and so on. A full audit is required and security
-concepts will have to be applied. Random bits are:</p>
-
+ <p>
+ Fetchmail 6.2.x was handed over in a pretty poor shape, security-wise. It would happily talk to the network with root privileges, used sscanf() to read remotely received data into fixed-length stack-based buffers without length limitation and so on. A full audit is required and security concepts will have to be applied. Random bits are:
+ </p>
<ul>
<li>code talking to the network does not require root privileges and
needs to run without root permissions</li>