Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | SECURITY: IMAP: --auth ssh no longer prevents STARTTLS | Matthias Andree | 2021-08-26 | 1 | -7/+15 |
| | |||||
* | SECURITY: IMAP: PREAUTH->abort if STARTTLS needed | Matthias Andree | 2021-08-26 | 1 | -0/+117 |
On --sslproto auto (or other nonempty values), when receiving IMAP PREAUTH state, abort the connection, rather than continuing with cleartext. --ssl is unaffected because it always negotiates TLS. See fetchmail-SA-2021-02.txt for details. |