Package: offlineimap Version: 6.5.5-0.1 Severity: normal Hi,
offlineimap(1) still pretends that fingerprint verification of SSL server certificates is left to be implemented, while it is available in 6.5.4 (#153240) and later. I'm concerned this obsolete piece of documentation may prevent people from protecting their email against active attackers, despite the needed functionality is available, which is kind of sad. Thanks for maintaining offlineimap in Debian! Cheers, -- intrigeri | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc | OTR fingerprint @ https://gaffer.ptitcanardnoir.org/intrigeri/otr.asc -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
