Re: pop3.el broken

[Stainless Steel Rat <ratinox@peorth.gweep.net>]

* Katsumi Yamaoka <yamaoka@jpl.org>  on Mon, 18 Mar 2002
|    The latter should be encoded with a reasonable coding-system before
|    passing it to md5bin (which is mentioned below).

A pass phrase is raw data, not text.  It should not be treated as something
a human can read.  It should -never- be smashed through any coding system.

Something you should be aware of before applying any patches: pop3.el is
maintained directly by the FSF since they forked it in 1999 and never
bothered to tell me about it.  It is part of Emacs, not Gnus.  All changes
need to go through the FSF; but your XEmacs code will most probably be
stripped.  XEmacs has a vastly different fork that incorporates much of
Franklin Lee's work but will never be merged into the FSF's code tree.

Wrapping APOP auth with reasonable advice may be the sanest thing to do.
It certainly requires the least ammount of new code.
-- 
Rat <ratinox@peorth.gweep.net>    \ Do not taunt Happy Fun Ball.
Minion of Nathan - Nathan says Hi! \ 
PGP Key: at a key server near you!  \ 
       That and five bucks will get you a small coffee at Starbucks.