From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: John Wiegley Newsgroups: gmane.emacs.bugs Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Date: Mon, 25 Sep 2017 08:21:40 -0700 Message-ID: References: <87fubaq0dl.fsf@moondust.localdomain> NNTP-Posting-Host: blaine.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: blaine.gmane.org 1506352995 16122 195.159.176.226 (25 Sep 2017 15:23:15 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Mon, 25 Sep 2017 15:23:15 +0000 (UTC) User-Agent: Gnus/5.130016 (Ma Gnus v0.16) Emacs/26.0 (darwin) Cc: 28597@debbugs.gnu.org, Richard Stallman To: nljlistbox2@gmail.com (N. Jackson) Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Mon Sep 25 17:23:10 2017 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dwVDv-0003jU-Jm for geb-bug-gnu-emacs@m.gmane.org; Mon, 25 Sep 2017 17:23:07 +0200 Original-Received: from localhost ([::1]:43017 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dwVE2-0003og-LV for geb-bug-gnu-emacs@m.gmane.org; Mon, 25 Sep 2017 11:23:14 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:37290) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dwVDt-0003nO-6u for bug-gnu-emacs@gnu.org; Mon, 25 Sep 2017 11:23:06 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dwVDq-0006tE-0R for bug-gnu-emacs@gnu.org; Mon, 25 Sep 2017 11:23:05 -0400 Original-Received: from debbugs.gnu.org ([208.118.235.43]:49963) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1dwVDp-0006t4-SE for bug-gnu-emacs@gnu.org; Mon, 25 Sep 2017 11:23:01 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1dwVDp-0007Xv-Jj for bug-gnu-emacs@gnu.org; Mon, 25 Sep 2017 11:23:01 -0400 X-Loop: help-debbugs@gnu.org Resent-From: John Wiegley Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Mon, 25 Sep 2017 15:23:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: Original-Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.150635292428943 (code B ref 28597); Mon, 25 Sep 2017 15:23:01 +0000 Original-Received: (at 28597) by debbugs.gnu.org; 25 Sep 2017 15:22:04 +0000 Original-Received: from localhost ([127.0.0.1]:58644 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dwVCt-0007Wk-V7 for submit@debbugs.gnu.org; Mon, 25 Sep 2017 11:22:04 -0400 Original-Received: from mail-pg0-f51.google.com ([74.125.83.51]:45441) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dwVCs-0007WH-FT for 28597@debbugs.gnu.org; Mon, 25 Sep 2017 11:22:02 -0400 Original-Received: by mail-pg0-f51.google.com with SMTP id 188so4149234pgb.2 for <28597@debbugs.gnu.org>; Mon, 25 Sep 2017 08:22:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:in-reply-to:date:message-id:references :user-agent:mime-version; bh=TbczxHXCbFrLswv3zNlCzPSam9gbYKFGN6s2BhVS89M=; b=UfSoNnjZvJSlYhqfAkINCrxcLwVdRCk1Y+0uelXml9jZOBk/Rr6WCC4xR9lOk50FYQ tWUoYQUdPE00M5Ll+SX7LNGNE1vXUOD2wRKh3wYQEmRz2/ddJ+zFJ4YtMF+cXCIuRvub iOv22UDyP8pfi/4cunodebtr2H20J1Y1yPXAi5kNYmY8JLD/uC52gFNIGunpAQ6CVaT1 +dQUNUH7FmknFuLYbULTrnv8T58xoQEeLSMUce4ax8BaFVyVFlLHxubaxDqbkYU4g8Ti O7hszpXzxVMG/I2aVYR/7cmcPa6z++bG7dP8LTjNp4Gbo2z5i8ejFtVXyK+hlOj4It1q IUxQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:in-reply-to:date:message-id :references:user-agent:mime-version; bh=TbczxHXCbFrLswv3zNlCzPSam9gbYKFGN6s2BhVS89M=; b=P1hfUJJwDyLKrVA6Ajyiwynq6yqG/7b5C+kPh8I4ClSlkL5vrbAaJounpyGXGnxMe8 DzXkVux6Gky8HYW8bbdy1IMm2T2JUU5XFwVpTmG0ZHHAjp3aIxVfF5Vr3Y1YnUABq4+k m9CvO7OiHmrbf1nuMVXaA5i84HKuh83khpFsbIJjr/AIGGuNrBY+XxtlvmvQom94RmyR HeFlpxu+CYmJAKt8dJvSiPaISTF46YmQI/S3tMokJ3LJJkAFmi9+ZBCWuZubhr8Ywo1S MmxqzJ7ighlBLQhm3hM9paihmoOYsroX4tvdW5KyRr/lEWlBNxyJ6B7e+Iikis4H/Br6 23lg== X-Gm-Message-State: AHPjjUjTbIt/lU1rw10KL4hd+htrjMxp8s1HN2sz8JfuNVwW57xKLAqt 3vh94r9gKI0K3uuEOJrYJUjDIYVG X-Google-Smtp-Source: AOwi7QDm+rf7IFdAcb+KQaehtr1HyoqPpWb4jY0s6UdzfeZYqJfB0AmP9SwTiludN+Vln676BRJTwQ== X-Received: by 10.84.236.78 with SMTP id h14mr7747054pln.2.1506352915834; Mon, 25 Sep 2017 08:21:55 -0700 (PDT) Original-Received: from Vulcan.local (76-234-69-149.lightspeed.frokca.sbcglobal.net. [76.234.69.149]) by smtp.gmail.com with ESMTPSA id y63sm11716420pgd.20.2017.09.25.08.21.54 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 25 Sep 2017 08:21:55 -0700 (PDT) X-Google-Original-From: "John Wiegley" Original-Received: by Vulcan.local (Postfix, from userid 501) id 6C49390703EE; Mon, 25 Sep 2017 08:21:54 -0700 (PDT) In-Reply-To: <87fubaq0dl.fsf@moondust.localdomain> (N. Jackson's message of "Mon, 25 Sep 2017 11:11:18 -0400") X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 208.118.235.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: "bug-gnu-emacs" Xref: news.gmane.org gmane.emacs.bugs:137414 Archived-At: >>>>> "NJ" == N Jackson writes: NJ> Configure issues the following warning: NJ> configure: WARNING: This configuration installs a 'movemail' program NJ> that retrieves POP3 email via only insecure channels. NJ> To omit insecure POP3, you can use './configure --without-pop'. NJ> If the warning is true, then --without-pop should be the default, and NJ> users should have to explicitly request an insecure Emacs with --with-pop. You are requesting a change in behavior that is exceedingly old, so I would like to hear from others what they think about making a change like this. Given how much less of a thing POP is becoming over the years, I'd be in favor of changing the default here. -- John Wiegley GPG fingerprint = 4710 CF98 AF9B 327B B80F http://newartisans.com 60E1 46C4 BD1A 7AC1 4BA2