Bug#603450: Is 603450 realy release critical?

[Alexander Reichle-Schmehl <tolimar@debian.org>]

Hi release manager,

#603450 is a bug (currently with severity grave, Justification: user
security hole), as offlineimap does no ssl certificate checking.


While I agree, that this is a really important feature, which should be
fixed, I'm wondering, if that really is release critical.


There's patch floating arround, which has a major regression: It doesn't
work for users of self signed certificates.  Should this bug be seen as
of release critical severity, would you therefore at least consider
tagging it squeeze-ignore?


Best Regards,
  Alexander