From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/85143 Path: news.gmane.org!not-for-mail From: Filipp Gunbin Newsgroups: gmane.emacs.gnus.general Subject: SSLv3 vulnerability Date: Thu, 16 Oct 2014 14:53:17 +0400 Message-ID: NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: ger.gmane.org 1413456882 10944 80.91.229.3 (16 Oct 2014 10:54:42 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Thu, 16 Oct 2014 10:54:42 +0000 (UTC) To: ding@gnus.org Original-X-From: ding-owner+M33387@lists.math.uh.edu Thu Oct 16 12:54:36 2014 Return-path: Envelope-to: ding-account@gmane.org Original-Received: from util0.math.uh.edu ([129.7.128.18]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1XeihW-0006oQ-EU for ding-account@gmane.org; Thu, 16 Oct 2014 12:54:34 +0200 Original-Received: from localhost ([127.0.0.1] helo=lists.math.uh.edu) by util0.math.uh.edu with smtp (Exim 4.63) (envelope-from ) id 1XeigR-0003S4-GE; Thu, 16 Oct 2014 05:53:27 -0500 Original-Received: from mx2.math.uh.edu ([129.7.128.33]) by util0.math.uh.edu with esmtps (TLSv1:AES256-SHA:256) (Exim 4.63) (envelope-from ) id 1XeigO-0003Rb-8Q for ding@lists.math.uh.edu; Thu, 16 Oct 2014 05:53:24 -0500 Original-Received: from quimby.gnus.org ([80.91.231.51]) by mx2.math.uh.edu with esmtps (TLSv1:AES128-SHA:128) (Exim 4.76) (envelope-from ) id 1XeigN-0005K8-8I for ding@lists.math.uh.edu; Thu, 16 Oct 2014 05:53:24 -0500 Original-Received: from out4-smtp.messagingengine.com ([66.111.4.28]) by quimby.gnus.org with esmtp (Exim 4.80) (envelope-from ) id 1XeigL-00008a-As for ding@gnus.org; Thu, 16 Oct 2014 12:53:21 +0200 Original-Received: from compute6.internal (compute6.nyi.internal [10.202.2.46]) by gateway2.nyi.internal (Postfix) with ESMTP id 8C29A20787 for ; Thu, 16 Oct 2014 06:53:20 -0400 (EDT) Original-Received: from frontend2 ([10.202.2.161]) by compute6.internal (MEProxy); Thu, 16 Oct 2014 06:53:20 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=fastmail.fm; h= x-sasl-enc:from:to:subject:date:message-id:mime-version :content-type; s=mesmtp; bh=LTXZ3V8Hsv6v4mcy+ZnjtsnTk7Y=; b=TwTH OFUgciUNf0ywhZvAz5eqyZAG83zM84twVxZPctw2HC+DISo0LAtuuZ2HISoIgVcU snGBlXQWO0tcZSFl2R6BmYX/qQ6oZwO65u2/9uex+1l+LccYddAKBB8w1CmB6s/r pgfB8tTVN7CLZjn5XD7noK1irON9KqZUZT6lB98= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=x-sasl-enc:from:to:subject:date :message-id:mime-version:content-type; s=smtpout; bh=LTXZ3V8Hsv6 v4mcy+ZnjtsnTk7Y=; b=AnOMFEo6Jr+qqH1I3NfISMH7xZRTvFHd09r5WowycZr DUk3Y6+4DVlLSPUPSrdfQw42YQDU8wRucAzVDaWgchFoN0vLKDDer8d8QCZzTGDY UeSXe4k/NlegoD7Ms9Q7rjB2RLt+a3i8x4o4griPYFUXGqcelVZJ0gKt5vW3WqrU = X-Sasl-enc: DCZwJ1PskdMqbG+ihgiTKoRLueNTFOTYUh7WIPa3pMhj 1413456800 Original-Received: from fgunbin.local (unknown [94.25.218.10]) by mail.messagingengine.com (Postfix) with ESMTPA id F36A8680099 for ; Thu, 16 Oct 2014 06:53:19 -0400 (EDT) X-Spam-Score: -0.3 (/) List-ID: Precedence: bulk Xref: news.gmane.org gmane.emacs.gnus.general:85143 Archived-At: Recently an SSL v3 vulnerability was discovered [1], so some mail servers (I know of fastmail.fm by the moment [2]) disabled / will disable it completely. Switching to TLS will help: (setq imap-ssl-program '("openssl s_client -quiet -tls1 -connect %s:%p")) [1] http://googleonlinesecurity.blogspot.co.uk/2014/10/this-poodle-bites-exploiting-ssl-30.html [2] The http://blog.fastmail.fm/2014/10/15/ssl-3-0-disabled-due-to-security-vulnerability/ -- Filipp