From e7199006808bb19f58d232da02172ee820d2d83e Mon Sep 17 00:00:00 2001
From: Matthias Andree <matthias.andree@gmx.de>
Date: Thu, 26 Aug 2021 23:53:14 +0200
Subject: SECURITY: IMAP: --auth ssh no longer prevents STARTTLS

---
 NEWS | 1 +
 1 file changed, 1 insertion(+)

(limited to 'NEWS')

diff --git a/NEWS b/NEWS
index 2d51b6e7..9ab3f065 100644
--- a/NEWS
+++ b/NEWS
@@ -97,6 +97,7 @@ fetchmail-6.4.22 (not yet released):
   TLS is better without STARTTLS - A Security Analysis of STARTTLS in the Email 
   Context" by Damian Poddebniak, Fabian Ising, Hanno Böck, and Sebastian 
   Schinzel.  The paper did not mention fetchmail.
+* On IMAP connections, --auth ssh no longer prevents STARTTLS negotiation.
 
 --------------------------------------------------------------------------------
 fetchmail-6.4.21 (released 2021-08-09, 30042 LoC):
-- 
cgit v1.2.3