Ok. I'll finally allow security matter enter the minimal conf if you want 
because it's security. You conviced me. ,-)

However, notice that your patch fails at protecting the user in the IMAP/IMAP 
case. I can think of two ways to accomplish the purpose:

###### light policy 

Encourage the user to look further for security options. Everything must be 
comments in the minimal config and must explain the points we discussed here:
* have a sample with the minimal options to get a secured connection;
* tell this is just minimal;
* point to offlineimap.conf.

###### strong policy

A more stricter policy would be to simply set `ssl = yes` the default. This 
would **force** the user to check the options related to security.


I let you the choice about how to do that. :-)

---
Reply to this email directly or view it on GitHub:
https://github.com/OfflineIMAP/offlineimap/issues/263#issuecomment-151857898
_______________________________________________
OfflineIMAP-project mailing list: [email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/offlineimap-project

OfflineIMAP homepages:
- https://github.com/OfflineIMAP
- http://offlineimap.org

Reply via email to