diff options
| author | Eric S. Raymond <esr@thyrsus.com> | 2001-03-15 06:39:11 +0000 |
|---|---|---|
| committer | Eric S. Raymond <esr@thyrsus.com> | 2001-03-15 06:39:11 +0000 |
| commit | 8e0cbf344748bf474f993eb54868c347357c1c71 (patch) | |
| tree | 80f0357d91d4c80e8b6b56c20f7170240fd92669 /fetchmail.man | |
| parent | 55e2aee705ff39ff2bf0379de96b88899af0dda9 (diff) | |
| download | fetchmail-8e0cbf344748bf474f993eb54868c347357c1c71.tar.gz fetchmail-8e0cbf344748bf474f993eb54868c347357c1c71.tar.bz2 fetchmail-8e0cbf344748bf474f993eb54868c347357c1c71.zip | |
Stronger security recommendations.
svn path=/trunk/; revision=3262
Diffstat (limited to 'fetchmail.man')
| -rw-r--r-- | fetchmail.man | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/fetchmail.man b/fetchmail.man index 746acdc1..78275757 100644 --- a/fetchmail.man +++ b/fetchmail.man @@ -2080,7 +2080,10 @@ and FreeBSD, the --interface option can be used to restrict polling to availability of a specific interface device with a specific local or remote IP address, but snooping is still possible if (a) either host has a network device that can be opened in promiscuous mode, or (b) -the intervening network link can be tapped. +the intervening network link can be tapped. We recommend the use of +.IR ssh (1) +tunnelling to not only shroud your passwords but encrypt the entire +conversation. .PP Use of the %F or %T escapes in an mda option could open a security hole, because they pass text manipulable by an attacker to a shell @@ -2117,7 +2120,7 @@ ODMR is very new. The ODMR code is untested. The `principal' option only handles Kerberos IV, not V. .PP Send comments, bug reports, gripes, and the like to the -fetchmail-friends list <fetchmail-friends@ccil.org>. An HTML FAQ is +fetchmail-friends list <fetchmail-friends@lists.ccil.org>. An HTML FAQ is available at the fetchmail home page; surf to http://www.tuxedo.org/~esr/fetchmail or do a WWW search for pages with `fetchmail' in their titles. |