i wrote:
 |says imap.c, so the password won't go over the wire anyway, it is
 |solely for the purpose of not asking for a password on the
 |terminal so that Ypnose doesn't have to store his passwords in
 |.netrc or encrypted via gpg(1) a.k.a. *agent-shell-lookup* on the
 |rare occasions where he uses S-nail to access multiple folders on
 |the same IMAP account.

But it was not a consciously implemented bug (or two of that
sort) even though it may sound like that!

Please imagine the situation: it took _long_ weeks to be able to
implement an URL based approach and use it a bit in the codebase,
effectively replacing the entire credential handling, and more, to
make it work.  Then some time later Ypnose reported that switching
folders on an IMAP account required reentering the password when
using the old, non-*v15-compat* way of credential lookup; that
code path i hadn't tested (at least not the way things finally
ended up), and because we now looked up credentials in
a completely different state than before (before any action was
initiated), here it ended up in an unfortunate side-effect.

That actually was quite shocking!  If i recall correctly i even
thought about dropping the entire non-*v15-compat* credential
path, also a no-go.  Hacking the backward-compatibility hack was
a solution that seemed to work when doing my local dovecot
testing.  Now: if i hadn't forgotten to implement memory trashing
when i've implemented the memory wrapper just like i did for the
string dope (how the original source called it), for whatever
reason, hastiness being the most likely, then at that time the
tests would have revealed that sloppiness.

Unfortunately neither that was true, nor did i actually listen for
real to what Ypnose and, three weeks later, Mantas Mikulėnas said.
Unfortunately i seem to be deaf and it required half a year, but
yesterday i think my cochlea moved.  Half a year delay, that isn't
really much, generally spoken.
'Happy that people seem to use S-nail and that Ypnose still
maintains his Void Linux package,
¡Hasta la victoria siempre!

--steffen

------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net
_______________________________________________
S-nail-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/s-nail-users

Reply via email to