From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: Robert Pluim Newsgroups: gmane.emacs.bugs Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Date: Fri, 29 Sep 2017 16:05:42 +0200 Message-ID: <87r2upd2h5.fsf@gmail.com> References: <837ewh8x5z.fsf@gnu.org> NNTP-Posting-Host: blaine.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: blaine.gmane.org 1506694047 29773 195.159.176.226 (29 Sep 2017 14:07:27 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Fri, 29 Sep 2017 14:07:27 +0000 (UTC) User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.60 (gnu/linux) Cc: John Wiegley , eggert@cs.ucla.edu, 28597@debbugs.gnu.org, nljlistbox2@gmail.com To: Eli Zaretskii Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Fri Sep 29 16:07:19 2017 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dxvwk-0006p8-JR for geb-bug-gnu-emacs@m.gmane.org; Fri, 29 Sep 2017 16:07:18 +0200 Original-Received: from localhost ([::1]:35518 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dxvwo-0004Su-PX for geb-bug-gnu-emacs@m.gmane.org; Fri, 29 Sep 2017 10:07:22 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:34831) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dxvvc-0003hf-7L for bug-gnu-emacs@gnu.org; Fri, 29 Sep 2017 10:06:09 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dxvvW-0001LR-H2 for bug-gnu-emacs@gnu.org; Fri, 29 Sep 2017 10:06:08 -0400 Original-Received: from debbugs.gnu.org ([208.118.235.43]:58912) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1dxvvW-0001Kq-D9 for bug-gnu-emacs@gnu.org; Fri, 29 Sep 2017 10:06:02 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1dxvvW-0004sw-3f for bug-gnu-emacs@gnu.org; Fri, 29 Sep 2017 10:06:02 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Robert Pluim Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Fri, 29 Sep 2017 14:06:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: Original-Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.150669395418755 (code B ref 28597); Fri, 29 Sep 2017 14:06:02 +0000 Original-Received: (at 28597) by debbugs.gnu.org; 29 Sep 2017 14:05:54 +0000 Original-Received: from localhost ([127.0.0.1]:39359 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dxvvO-0004sR-4s for submit@debbugs.gnu.org; Fri, 29 Sep 2017 10:05:54 -0400 Original-Received: from mail-wm0-f41.google.com ([74.125.82.41]:45516) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dxvvM-0004sD-CM for 28597@debbugs.gnu.org; Fri, 29 Sep 2017 10:05:52 -0400 Original-Received: by mail-wm0-f41.google.com with SMTP id q124so245921wmb.0 for <28597@debbugs.gnu.org>; Fri, 29 Sep 2017 07:05:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:references:gmane-reply-to-list:date:in-reply-to :message-id:user-agent:mime-version; bh=k6aOhYpNDwriwaZUP3aB4D7LP57Ub8reZ1F9aA9MCcU=; b=a14hSEt2kQ26EOyuwFJ9iMqi39BvZbFVoKPBpbX+ejhR9UhJVb1Uj9cjscWgKp9FGy Gis7RbqJp/O83bbPKsh0QZuZoo7zKkjdFXr3yMxoDcjlu+eb1cOzDkBVXbfKb6qcRwbQ i55e9oDaxopj7EzKKHtra5/iA+wQkp63Ch5FP60yYA9g8Y0kqZ1DamCkv+ChSoJ46KI1 uKQwO68BU0E/r1EG0EnzFuK5VDZbib4jB4T+sW3x2B3uOs40KDB/VLXx3l77/unV1AJ2 xDe5nk0Ro7oFffzyarxoYU5n789IjbdSMyc9H9KovEfwVDwYBwZHyWPU78RTlFpCIBJy wXHw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references :gmane-reply-to-list:date:in-reply-to:message-id:user-agent :mime-version; bh=k6aOhYpNDwriwaZUP3aB4D7LP57Ub8reZ1F9aA9MCcU=; b=gpqehKaetg4uVgql+9CwLz2bohiZPiE35iVro6m0b8wMJJ96HOZycnD2+vDb5M6Fte d3PBlyL+kzvNm0bwknLzc+0JwkBAh9hkU87HVvGd9/vPTxmHfSQ0WMqK9lXDQinWmTnR kst4d5j93ZTCbt0w+QINii+A0DX60fHe837c7wb7JPG0ijwLQGqiuUjN9JB3saZZC+Vh kCXXYADVZfu+3guI2yTz1dbMVWUBIaDlRzwo3ebLt1GG9qhNBeeArD+dOo1eVQ+dAIQY iwEt0C/sjyWllmDGqYQ5KStmX1eXPUbhd2TH+m28fbKfAq/7WoLqU+gVHOVrj56Uv9Ys f+Tg== X-Gm-Message-State: AHPjjUiNo7ncWtQV/3hal52X81vNxNlH8lqMZL9lAm2JSREnJL5wPpPk +N7+TqNo1XW8TS+exvkdWVaNd7doifQ= X-Google-Smtp-Source: AOwi7QDUbgD7+HxRUhkdJp4RzEYCogHfc2YHVvSQPf3qyxUAp2UywTIjS2DqYCEjmel2VLB2MhjwnQ== X-Received: by 10.80.177.141 with SMTP id m13mr10128995edd.114.1506693946240; Fri, 29 Sep 2017 07:05:46 -0700 (PDT) Original-Received: from rpluim-ubuntu ([149.5.228.1]) by smtp.gmail.com with ESMTPSA id i16sm3877632edj.77.2017.09.29.07.05.44 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 29 Sep 2017 07:05:45 -0700 (PDT) Gmane-Reply-To-List: yes In-Reply-To: <837ewh8x5z.fsf@gnu.org> (Eli Zaretskii's message of "Fri, 29 Sep 2017 16:14:00 +0300") X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 208.118.235.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: "bug-gnu-emacs" Xref: news.gmane.org gmane.emacs.bugs:137595 Archived-At: Eli Zaretskii writes: >> From: John Wiegley >> Date: Tue, 26 Sep 2017 11:51:59 -0700 >> Cc: "N. Jackson" , 28597@debbugs.gnu.org >> >> >>>>> Paul Eggert writes: >> >> > As Glenn noted, the 'configure' message N. mentions came from an uneasy >> > compromise between worry about the default lack-of-security in Emacs, and >> > worry about backward compatibility (see Bug#26102). Although I favor making >> > --without-pop the default, at this point it's really an issue for the two >> > maintainers to decide. >> >> I'm OK making it the default. Let's wait until Eli's back from his trip and he >> can add his thoughts. > > I already agreed in > http://lists.gnu.org/archive/html/emacs-devel/2017-08/msg00054.html to > have --without-pop be the default, and Paul already installed a patch > to do that. So I'm confused about this discussion: what exactly is > the problem, and what needs to be done/decided? Are we talking about > Posix systems where GNU Mailutils are not available? If so, do we > want to leave them without movemail at all rather than with one which > supports POP3? Or do we want to give them movemail, but without POP3? I thought we were discussing making --without-pop be the default even if GNU Mailutils are not available, and it's what I'm advocating. Paul's patch only did that if they were found. If that means that some people need to install GNU Mailutils, which support secure(r) protocols, then I'm all in favour. Robert