From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/85147 Path: news.gmane.org!not-for-mail From: Andreas Schwab Newsgroups: gmane.emacs.gnus.general Subject: Re: SSLv3 vulnerability Date: Thu, 16 Oct 2014 18:47:36 +0200 Message-ID: <87lhogezbr.fsf@igel.home> References: NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: ger.gmane.org 1413478133 30352 80.91.229.3 (16 Oct 2014 16:48:53 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Thu, 16 Oct 2014 16:48:53 +0000 (UTC) Cc: ding@gnus.org To: Filipp Gunbin Original-X-From: ding-owner+M33391@lists.math.uh.edu Thu Oct 16 18:48:43 2014 Return-path: Envelope-to: ding-account@gmane.org Original-Received: from util0.math.uh.edu ([129.7.128.18]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1XeoEF-0006H8-2m for ding-account@gmane.org; Thu, 16 Oct 2014 18:48:43 +0200 Original-Received: from localhost ([127.0.0.1] helo=lists.math.uh.edu) by util0.math.uh.edu with smtp (Exim 4.63) (envelope-from ) id 1XeoDI-00055G-77; Thu, 16 Oct 2014 11:47:44 -0500 Original-Received: from mx2.math.uh.edu ([129.7.128.33]) by util0.math.uh.edu with esmtps (TLSv1:AES256-SHA:256) (Exim 4.63) (envelope-from ) id 1XeoDG-00054r-D2 for ding@lists.math.uh.edu; Thu, 16 Oct 2014 11:47:42 -0500 Original-Received: from quimby.gnus.org ([80.91.231.51]) by mx2.math.uh.edu with esmtps (TLSv1:AES128-SHA:128) (Exim 4.76) (envelope-from ) id 1XeoDE-0007D8-9e for ding@lists.math.uh.edu; Thu, 16 Oct 2014 11:47:41 -0500 Original-Received: from mail-out.m-online.net ([212.18.0.9]) by quimby.gnus.org with esmtp (Exim 4.80) (envelope-from ) id 1XeoDC-0007li-CG for ding@gnus.org; Thu, 16 Oct 2014 18:47:38 +0200 Original-Received: from frontend01.mail.m-online.net (unknown [192.168.8.182]) by mail-out.m-online.net (Postfix) with ESMTP id 3jJbyK6RJLz3hj8b; Thu, 16 Oct 2014 18:47:37 +0200 (CEST) Original-Received: from localhost (dynscan1.mnet-online.de [192.168.6.68]) by mail.m-online.net (Postfix) with ESMTP id 3jJbyK3X3jzvh2C; Thu, 16 Oct 2014 18:47:37 +0200 (CEST) X-Virus-Scanned: amavisd-new at mnet-online.de Original-Received: from mail.mnet-online.de ([192.168.8.182]) by localhost (dynscan1.mail.m-online.net [192.168.6.68]) (amavisd-new, port 10024) with ESMTP id j07U8WAwCbvG; Thu, 16 Oct 2014 18:47:36 +0200 (CEST) X-Auth-Info: 8LDD1nThNB2UrCfObEdLdb1QXMDovljA4FkuDCMxl6rPlQZf335dJCNDoua7Ikjz Original-Received: from igel.home (host-188-174-211-43.customer.m-online.net [188.174.211.43]) by mail.mnet-online.de (Postfix) with ESMTPA; Thu, 16 Oct 2014 18:47:36 +0200 (CEST) Original-Received: by igel.home (Postfix, from userid 1000) id 335EC2C30D8; Thu, 16 Oct 2014 18:47:36 +0200 (CEST) X-Yow: I want a WESSON OIL lease!! In-Reply-To: (Filipp Gunbin's message of "Thu, 16 Oct 2014 14:53:17 +0400") User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3.94 (gnu/linux) X-Spam-Score: -1.9 (-) List-ID: Precedence: bulk Xref: news.gmane.org gmane.emacs.gnus.general:85147 Archived-At: Filipp Gunbin writes: > Recently an SSL v3 vulnerability was discovered [1], so some mail > servers (I know of fastmail.fm by the moment [2]) disabled / will disable it > completely. > > Switching to TLS will help: > > (setq imap-ssl-program '("openssl s_client -quiet -tls1 -connect %s:%p")) Just use :stream tls or :stream starttls instead of :stream ssl. Andreas. -- Andreas Schwab, schwab@linux-m68k.org GPG Key fingerprint = 58CA 54C7 6D53 942B 1756 01D3 44D5 214B 8276 4ED5 "And now for something completely different."