Your message dated Wed, 5 Dec 2012 19:53:34 +0100 with message-id <[email protected]> and subject line Re: Bug#441053: icedove: new IMAP accounts should default to "TLS, if available" has caused the Debian Bug report #441053, regarding icedove: new IMAP accounts should default to "TLS, if available" to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 441053: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=441053 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: icedove Version: 2.0.0.4.dfsg1-2 Severity: normal The default security setting for IMAP accounts is [use secure connection] "Never". It should be "TLS, if available" at the very least! I'd suggest the following in increasing order of desirability (and decreasing order of simpleness): * set the default to TLS, if available * alert the user if TLS is not available and what this means * default to TLS, fallback to try SSL, then finally in the clear after prompting the user This is particularly an issue when you use the wizard to create a new account, as it will automatically go off and connect to your mail server in the clear (if such connections are allowed by the server) even if a secure connection is available. -- System Information: Debian Release: lenny/sid APT prefers unstable APT policy: (500, 'unstable'), (500, 'stable'), (1, 'experimental') Architecture: i386 (i686) Kernel: Linux 2.6.21-2-686 (SMP w/1 CPU core) Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages icedove depends on: ii debianutils 2.23.1 Miscellaneous utilities specific t ii fontconfig 2.4.2-1.2 generic font configuration library ii libatk1.0-0 1.18.0-2 The ATK accessibility toolkit ii libc6 2.6.1-2 GNU C Library: Shared libraries ii libcairo2 1.4.10-1 The Cairo 2D vector graphics libra ii libfontconfig1 2.4.2-1.2 generic font configuration library ii libfreetype6 2.3.5-1+b1 FreeType 2 font engine, shared lib ii libgcc1 1:4.2.1-5 GCC support library ii libglib2.0-0 2.14.0-2 The GLib library of C routines ii libgtk2.0-0 2.11.6-1 The GTK+ graphical user interface ii libhunspell-1.1-0 1.1.9-1 spell checker and morphological an ii libjpeg62 6b-13 The Independent JPEG Group's JPEG ii libnspr4-0d 4.6.7-1 NetScape Portable Runtime Library ii libnss3-0d 3.11.7-1 Network Security Service libraries ii libpango1.0-0 1.18.1-1 Layout and rendering of internatio ii libpng12-0 1.2.15~beta5-2 PNG library - runtime ii libstdc++6 4.2.1-5 The GNU Standard C++ Library v3 ii libx11-6 2:1.0.3-7 X11 client-side library ii libxcursor1 1:1.1.9-1 X cursor management library ii libxext6 1:1.0.3-2 X11 miscellaneous extension librar ii libxfixes3 1:4.0.3-2 X11 miscellaneous 'fixes' extensio ii libxft2 2.1.12-2 FreeType-based font drawing librar ii libxi6 2:1.1.2-1 X11 Input extension library ii libxinerama1 1:1.0.2-1 X11 Xinerama extension library ii libxrandr2 2:1.2.1-1 X11 RandR extension library ii libxrender1 1:0.9.3-1 X Rendering Extension client libra ii libxt6 1:1.0.5-3 X11 toolkit intrinsics library ii psmisc 22.5-1 Utilities that use the proc filesy ii zlib1g 1:1.2.3.3.dfsg-5 compression library - runtime icedove recommends no packages. -- no debconf information
--- End Message ---
--- Begin Message ---Hello Jon, icedove works now near fully your suggested doing. It checks the possible connections typs from the mozilla database, if no suitable settings found it sets the authentification to "automatic", thet means icedove will try to start with a crypted connection to the the remote server and fall back to unsecure connections if they are impossible. So would say you bug is gone. Regards Carsten On Thu, Sep 06, 2007 at 01:08:11PM +0100, Jon Dowland wrote: > Package: icedove > Version: 2.0.0.4.dfsg1-2 > Severity: normal > > The default security setting for IMAP accounts is [use > secure connection] "Never". It should be "TLS, if > available" at the very least! I'd suggest the following in > increasing order of desirability (and decreasing order of > simpleness): > > * set the default to TLS, if available > * alert the user if TLS is not available and what this > means > * default to TLS, fallback to try SSL, then finally in > the clear after prompting the user > > This is particularly an issue when you use the wizard to > create a new account, as it will automatically go off and > connect to your mail server in the clear (if such > connections are allowed by the server) even if a secure > connection is available.
--- End Message ---
