#3916: Mutt 1.8: TOFU approach bails out on first fail or reject, not offering
higher links of the cert' chain
--------------------------+----------------------
  Reporter:  kratem32     |      Owner:  mutt-dev
      Type:  enhancement  |     Status:  new
  Priority:  minor        |  Milestone:  1.8
 Component:  crypto       |    Version:
Resolution:               |   Keywords:  tofu
--------------------------+----------------------

Comment (by m-a):

 It does **not** add security, unless you have some way to verify those
 certificates via secure channels (certificate fingerprints by snail mail
 when you get your account data, or similar).

 Just because masses of third party documentation is misleading does not
 make it the right thing to do from a system design point of view.

--
Ticket URL: <https://dev.mutt.org/trac/ticket/3916#comment:17>
Mutt <http://www.mutt.org/>
The Mutt mail user agent

Reply via email to