From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Stefan Monnier Newsgroups: gmane.emacs.devel Subject: Re: STARTTLS for erc Date: Sun, 26 Jun 2011 21:07:00 -0400 Message-ID: References: NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: dough.gmane.org 1309136847 770 80.91.229.12 (27 Jun 2011 01:07:27 GMT) X-Complaints-To: usenet@dough.gmane.org NNTP-Posting-Date: Mon, 27 Jun 2011 01:07:27 +0000 (UTC) To: emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Mon Jun 27 03:07:23 2011 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([140.186.70.17]) by lo.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1Qb0IM-0004db-U5 for ged-emacs-devel@m.gmane.org; Mon, 27 Jun 2011 03:07:23 +0200 Original-Received: from localhost ([::1]:50842 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Qb0IM-00058U-1j for ged-emacs-devel@m.gmane.org; Sun, 26 Jun 2011 21:07:22 -0400 Original-Received: from eggs.gnu.org ([140.186.70.92]:59916) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Qb0I8-00058C-Ll for emacs-devel@gnu.org; Sun, 26 Jun 2011 21:07:09 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Qb0I7-0001XL-0z for emacs-devel@gnu.org; Sun, 26 Jun 2011 21:07:08 -0400 Original-Received: from ironport2-out.teksavvy.com ([206.248.154.183]:54704 helo=ironport2-out.pppoe.ca) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Qb0I6-0001XB-Os for emacs-devel@gnu.org; Sun, 26 Jun 2011 21:07:06 -0400 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Ak4IAF/XB05MCqDH/2dsb2JhbABPA5hbjmx4iHS+YYM/gnEEnhGEKQ X-IronPort-AV: E=Sophos;i="4.65,429,1304308800"; d="scan'208";a="117164610" Original-Received: from 76-10-160-199.dsl.teksavvy.com (HELO pastel.home) ([76.10.160.199]) by ironport2-out.pppoe.ca with ESMTP/TLS/ADH-AES256-SHA; 26 Jun 2011 21:07:00 -0400 Original-Received: by pastel.home (Postfix, from userid 20848) id 752CE58E05; Sun, 26 Jun 2011 21:07:00 -0400 (EDT) In-Reply-To: (Lars Magne Ingebrigtsen's message of "Sat, 25 Jun 2011 19:04:38 +0200") User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.0.50 (gnu/linux) X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 206.248.154.183 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:141037 Archived-At: >> A protocol where sending a password is "necessary" is basically >> incompatible with STARTTLS anyway (otherwise, it's trivial to force the >> password to be sent in the clear). > I don't quite follow you. With pop3, for instance, a password is > necessary, and STARTTLS works perfectly fine for pop3... IIUC STARTTLS refers to "opportunistic encryption", which I find incompatible with passwords since the opportunistic part means that if the opportunity is absent, you end up sending passwords in the clear. But maybe you had something else in mind for STARTTLS. Stefan