plaintextloginpause affects all POP3 connections
Bron Gondwana
brong at fastmail.fm
Thu Oct 15 19:34:17 EDT 2015
@Ellie - let's add this, it's plainly the right thing to do.
On Fri, Oct 16, 2015, at 02:54, Wolfgang Breyha wrote:
> On 24/09/15 22:57, Michael D. Sofka wrote:
> > The plaintextloginpause affects all POP3 connections, even those that
> > are encrypted via pop3s or STARTTLS. Not that this is necessarily a
> > bad thing.... But is it expected behaviour?
>
> True for 2.4.18 and 2.5.6. Looking at the code in pop3d.c it is expected
> behaviour. Looking at imapd.c as well it seems it should not affect TLS
> protected connections.
>
> I patched it a while ago for my local RPMs:
>
> > --- pop3d.c.orig 2014-09-15 15:33:35.993293154 +0200
> > +++ pop3d.c 2015-07-06 16:32:15.281275940 +0200
> > @@ -1497,7 +1508,8 @@
> > popd_userid, popd_subfolder ? popd_subfolder : "",
> > popd_starttls_done ? "+TLS" : "", "User logged in", session_id());
> >
> > - if ((plaintextloginpause = config_getint(IMAPOPT_PLAINTEXTLOGINPAUSE))
> > + if ((!popd_starttls_done) &&
> > + (plaintextloginpause = config_getint(IMAPOPT_PLAINTEXTLOGINPAUSE))
> > != 0) {
> > sleep(plaintextloginpause);
> > }
>
> Greetings, Wolfgang
> --
> Wolfgang Breyha <wbreyha at gmx.net> | http://www.blafasel.at/
> Vienna University Computer Center | Austria
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
--
Bron Gondwana
brong at fastmail.fm
More information about the Info-cyrus
mailing list