[Posted to bugreport (really this time) rather than privately] On Wed, 22 Mar 2006 16:17:56 -0600 Robert Thompson <[EMAIL PROTECTED]> wrote:
> Well an example: Since I had to switch email clients, I lost *this* > message until now. Well, I interpret such email as *delayed*, not lost. I do understand that this is serious (as I've re-tagged the bugreport) and that you have lost lots of time and frustration on this so far. And I appreciate your help in resolving this. I just disagree with your tagging this as grave, as that would mean the package was to be dropped completely from next release of Debian if this bug was not solved before then. I sincerely believe that even with this bug it is still relevant to distribute the package. > The listed workaround to fix the TLS problem reduces the crypto > security to an absurdly low level. What listed workaround? > Sorry about this delay. No problem :-) > libssl got upgraded to 0.9.7e-3sarge1 on November 21 > and uw-imapd got updated to 7:2002edebian1-11sarge1 on October 14, so > I don't think that was it. And the services (or maybe the whole machine) is frequently restarted? > The problem appeared for OSX users immediately after they shipped the > SSL fix, and for Thunderbird users immediately after they shipped the > SSL fix. I don't have references to the changelogs handy, but I did > check the times and they match: For all users where I can get data, > the complaint happened very shortly after they updated their mail > client. What SSL fix? Sorry if I am missing something obvious. > Bottom line: for us, the problem is mitigated by switching to SSL. I am confused. Earlier you wrote that "Some time in the recent past, SSL connections have mostly stopped working" - did you then mean TLS connection? (and a language question, as I am not a native speaker: "mitigated" means "worked around", right?) Kind regards, - Jonas P.S. Please consider reposting your entire message to the bugreport for others to help resolving this. I have only quoted above what I found relevant for this response. -- * Jonas Smedegaard - idealist og Internet-arkitekt * Tlf.: +45 40843136 Website: http://dr.jones.dk/ - Enden er nær: http://www.shibumi.org/eoti.htm
pgpNPbtcoIbfZ.pgp
Description: PGP signature
