From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: nljlistbox2@gmail.com (N. Jackson) Newsgroups: gmane.emacs.bugs Subject: bug#28597: 26.0.60; [Security] Configure should use --without-pop by default Date: Mon, 02 Oct 2017 13:22:01 -0400 Message-ID: <87fub131om.fsf@moondust.localdomain> References: <837ewh8x5z.fsf@gnu.org> <87ing17akt.fsf@moondust.localdomain> <834lrl75o6.fsf@gnu.org> <877ewh74oq.fsf@moondust.localdomain> <83mv5d5ngv.fsf@gnu.org> NNTP-Posting-Host: blaine.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: blaine.gmane.org 1506964991 18381 195.159.176.226 (2 Oct 2017 17:23:11 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Mon, 2 Oct 2017 17:23:11 +0000 (UTC) User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.60 (gnu/linux) Cc: jwiegley@gmail.com, Robert Pluim , eggert@cs.ucla.edu, 28597@debbugs.gnu.org To: Eli Zaretskii Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Mon Oct 02 19:23:05 2017 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dz4Qq-0003qm-9b for geb-bug-gnu-emacs@m.gmane.org; Mon, 02 Oct 2017 19:23:04 +0200 Original-Received: from localhost ([::1]:53495 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dz4Qx-0007Vg-No for geb-bug-gnu-emacs@m.gmane.org; Mon, 02 Oct 2017 13:23:11 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:60047) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dz4Qr-0007VZ-8s for bug-gnu-emacs@gnu.org; Mon, 02 Oct 2017 13:23:06 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dz4Qo-0002lW-4j for bug-gnu-emacs@gnu.org; Mon, 02 Oct 2017 13:23:05 -0400 Original-Received: from debbugs.gnu.org ([208.118.235.43]:35788) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1dz4Qo-0002lC-0c for bug-gnu-emacs@gnu.org; Mon, 02 Oct 2017 13:23:02 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1dz4Qn-0007CC-Km for bug-gnu-emacs@gnu.org; Mon, 02 Oct 2017 13:23:01 -0400 X-Loop: help-debbugs@gnu.org Resent-From: nljlistbox2@gmail.com (N. Jackson) Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Mon, 02 Oct 2017 17:23:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 28597 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: Original-Received: via spool by 28597-submit@debbugs.gnu.org id=B28597.150696493127587 (code B ref 28597); Mon, 02 Oct 2017 17:23:01 +0000 Original-Received: (at 28597) by debbugs.gnu.org; 2 Oct 2017 17:22:11 +0000 Original-Received: from localhost ([127.0.0.1]:44469 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dz4Pz-0007At-GP for submit@debbugs.gnu.org; Mon, 02 Oct 2017 13:22:11 -0400 Original-Received: from mail-io0-f172.google.com ([209.85.223.172]:49499) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dz4Px-0007Af-F0 for 28597@debbugs.gnu.org; Mon, 02 Oct 2017 13:22:10 -0400 Original-Received: by mail-io0-f172.google.com with SMTP id 21so5357977iof.6 for <28597@debbugs.gnu.org>; Mon, 02 Oct 2017 10:22:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version; bh=uEPljIn+hUMugUmuBpIlBZ285jD+CtEMZftd2hfFKSY=; b=K5J5ahYP37hf/VWEh/Nhj1m2bVf6UQr6DLoRn+Bg81upxMYN1tsQANwtkE1nsBm6IC rKhNnRp/mEGCyMrQ0fDWdT3urdlJqgbhtDNpR7fZexFy0HV77rU0FOYa2PYLs/35+KHg Ud+pmnMypWlPEmL1GwhWPISxMWVeP4o/aZgiP4xZytknsaT1+O56n0b5UXMoDWA0DeCj HDr7MyGGsi+KeX1MySuY9ypNujy8NTIIE0R/dpP31kuVArQEIeH0ZbNKrTbDSNeqr3Ig mq5QFIuzdDCOYfOJ5oYbW4KbEgHHJukUe1LBBbJxe9hbAj0QhsG7QAcC3a11HkBYbM0I PfSA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to :message-id:user-agent:mime-version; bh=uEPljIn+hUMugUmuBpIlBZ285jD+CtEMZftd2hfFKSY=; b=Zx9UHjTVJhAGLM9yvCZYQZ07IMEiEoVATQOqJ4fgbWe0ALWGP4I1Iyx3Urx4beSyY7 EM2E7Z1ldTTKbCPIx/HHzw/StRa0LQuLKBkj65OaDYiB1UYqv4BBfgZGZ9gb+6EKCt43 6PTpZN7xdJs6LMdy1c1Nwm9QIf66iSTui2WNOr/fDAIj/LAIukxk69WMEkJG8JU0VAUk bpJFbd+p4Qbb8LyFGZaaTKKmy07OYCkG4VW1s3LjfPZgG8rjh8hbeLpbPAGmJISk/W8J XbZVL00W6bp95iaPcvh4yuiran6BxRRi+QjxUHVIYwcgbEvP0FD83I/ujpuB3zgff+vA 5sHg== X-Gm-Message-State: AMCzsaUSUdlsNgXll6z+XuzXbD/TvMBEZbqW7wBTRSbKZeXl7B0g1j8E HVeByH3i7M/J7tf2HAOY5fY= X-Google-Smtp-Source: AOwi7QC1Txradmr38Aiw0S+L1+L+0EEpIH7Rp4JCU59MmtHYD/9yauY4p1c2MGt0UU7No3jCZWu1lA== X-Received: by 10.107.11.229 with SMTP id 98mr25783801iol.304.1506964923683; Mon, 02 Oct 2017 10:22:03 -0700 (PDT) Original-Received: from moondust.localdomain.nodomain.none ([72.143.113.194]) by smtp.gmail.com with ESMTPSA id l191sm4660750ioe.22.2017.10.02.10.22.02 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Mon, 02 Oct 2017 10:22:03 -0700 (PDT) In-Reply-To: <83mv5d5ngv.fsf@gnu.org> (Eli Zaretskii's message of "Fri, 29 Sep 2017 22:11:44 +0300") X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 208.118.235.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: "bug-gnu-emacs" Xref: news.gmane.org gmane.emacs.bugs:137793 Archived-At: At 22:11 +0300 on Friday 2017-09-29, Eli Zaretskii wrote: > >> From: nljlistbox2@gmail.com (N. Jackson) >> Date: Fri, 29 Sep 2017 14:14:29 -0400 >> >> I don't think that makes sense, does it? > > I hope it does, as this is what I asked for at the time, for > reasons that did make sense to me. Indeed. You considered broader factors than I was aware of previously. >> There's nothing terribly odd about my system and if the warning >> message from config is true, then _by default_ I'm going to get >> built an insecure Emacs. > > Only if you use POP3 to fetch your mail. This raised a question in my mind (which has probably already been considered and dealt with). When a user has an Emacs that's configured to use an insecure movemail for POP3, when they issue a command in Emacs that invokes it, do they get a warning from Emacs? Given that many users don't build their own Emacs, they'll not see a warning from configure, so it would seem sensible for them to be warned at run time. (Given that they won't want to be plagued with a warning every time they check their mail, I'm thinking of a warning that appears when a relevant command it used for the first time, similar to the way disabled commands work.) N.