From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/75872 Path: news.gmane.org!not-for-mail From: Ted Zlatanov Newsgroups: gmane.emacs.gnus.general Subject: Re: [BUG] Prefer AUTH=CRAM-MD5 makes login fail in some IMAP servers. Date: Mon, 24 Jan 2011 11:44:42 -0600 Organization: =?utf-8?B?0KLQtdC+0LTQvtGAINCX0LvQsNGC0LDQvdC+0LI=?= @ Cienfuegos Message-ID: <87tygyci2d.fsf@lifelogs.com> References: <871v4ktya0.fsf@babel.ls.fi.upm.es> <87hbdfw1km.fsf@babel.ls.fi.upm.es> <8739ozvyn8.fsf@babel.ls.fi.upm.es> <87mxmsrb2l.fsf@gnus.org> NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: dough.gmane.org 1295891149 16932 80.91.229.12 (24 Jan 2011 17:45:49 GMT) X-Complaints-To: usenet@dough.gmane.org NNTP-Posting-Date: Mon, 24 Jan 2011 17:45:49 +0000 (UTC) To: ding@gnus.org Original-X-From: ding-owner+M24223@lists.math.uh.edu Mon Jan 24 18:45:45 2011 Return-path: Envelope-to: ding-account@gmane.org Original-Received: from util0.math.uh.edu ([129.7.128.18]) by lo.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1PhQU4-0001nQ-OK for ding-account@gmane.org; Mon, 24 Jan 2011 18:45:45 +0100 Original-Received: from localhost ([127.0.0.1] helo=lists.math.uh.edu) by util0.math.uh.edu with smtp (Exim 4.63) (envelope-from ) id 1PhQTX-0004i2-Os; Mon, 24 Jan 2011 11:45:11 -0600 Original-Received: from mx1.math.uh.edu ([129.7.128.32]) by util0.math.uh.edu with esmtps (TLSv1:AES256-SHA:256) (Exim 4.63) (envelope-from ) id 1PhQTW-0004ht-Mn for ding@lists.math.uh.edu; Mon, 24 Jan 2011 11:45:10 -0600 Original-Received: from quimby.gnus.org ([80.91.231.51]) by mx1.math.uh.edu with esmtp (Exim 4.72) (envelope-from ) id 1PhQTS-0007yR-JT for ding@lists.math.uh.edu; Mon, 24 Jan 2011 11:45:10 -0600 Original-Received: from lo.gmane.org ([80.91.229.12]) by quimby.gnus.org with esmtp (Exim 4.72) (envelope-from ) id 1PhQTR-0008Oz-TI for ding@gnus.org; Mon, 24 Jan 2011 18:45:05 +0100 Original-Received: from list by lo.gmane.org with local (Exim 4.69) (envelope-from ) id 1PhQTR-0001Pn-O1 for ding@gnus.org; Mon, 24 Jan 2011 18:45:05 +0100 Original-Received: from 38.98.147.130 ([38.98.147.130]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Mon, 24 Jan 2011 18:45:05 +0100 Original-Received: from tzz by 38.98.147.130 with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Mon, 24 Jan 2011 18:45:05 +0100 X-Injected-Via-Gmane: http://gmane.org/ Original-Lines: 21 Original-X-Complaints-To: usenet@dough.gmane.org X-Gmane-NNTP-Posting-Host: 38.98.147.130 X-Face: bd.DQ~'29fIs`T_%O%C\g%6jW)yi[zuz6;d4V0`@y-~$#3P_Ng{@m+e4o<4P'#(_GJQ%TT= D}[Ep*b!\e,fBZ'j_+#"Ps?s2!4H2-Y"sx" User-Agent: Gnus/5.110011 (No Gnus v0.11) Emacs/24.0.50 (gnu/linux) Cancel-Lock: sha1:xTvfY/72/QxCB9s4QIz0tQac9x4= X-Spam-Score: -0.7 (/) List-ID: Precedence: bulk Xref: news.gmane.org gmane.emacs.gnus.general:75872 Archived-At: On Sat, 22 Jan 2011 20:29:54 +0100 Lars Ingebrigtsen wrote: LI> If it is just your particular server that has this problem, then I guess LI> this isn't a Gnus problem. However, if it's a common bug in some IMAP LI> servers, perhaps Gnus should default to using LOGIN, which is faster LI> than CRAM-MD5 (one less round trip to the server), and is probably LI> tested a lot more than CRAM-MD5. LI> The drawback is that if you're talking to your IMAP server over a plain LI> network connection (boo!) to a server that doesn't support STARTTLS LI> (boo!), but the server has both CRAM-MD5 and LOGIN enabled, then your LI> passwords will be transferred unencrypted (boo!). LI> nnimap could default to using CRAM-MD5 in that particular case, but then LI> we're kinda into a very special case, and if CRAM-MD5 is buggy, then LI> some people will be affected anyway... I think CRAM-MD5 should be preferred if it's available. The user should be able to disable that preference like any other login method. Ted