[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Mutt or KMail



On Sun, Aug 25, 2002 at 07:38:48AM -0500, Bryan K. Walton wrote:
> On Sun, Aug 25, 2002 at 12:31:24PM +0930, Tom Cook wrote:
> > 
> > The advantage I gain in using fetchmail to download mail is that then
> > I can easily pipe it through procmail... in fact the default exim
> > config does so automagically if you have procmail installed and have a
> > .procmailrc file in your home directory.
> 
> The one disadvantage I see from letting fetchmail retrieve is that there
> doesn't seem to be a way for fetchmail to store email passwords on the
> computer using encryption.  Perhaps I am wrong (please tell me so) but
> unless you supply your password every time you check for mail, passwords
> are kept in plain text.  

!? What's the point of using encryption here? If the code is open
source, then the algorithm cannot be secret; only the encryption key.
Which leaves you with having to enter a decryption key. Back to square
one.

    http://www.tuxedo.org/~esr/fetchmail/design-notes.html
[search for "password encryption"]

> That may be fine if your mail account is the only one fetchmail will
> retrieve mail for.  But if you have other users who don't want you to
> know there password, you have a problem.

c/there/their/ ?

Problem is easily solved by:

    chmod go-w ~
    chmod go= ~/.fetchmailrc

which is the way it should be IMHO.
-- 
Karl E. Jørgensen
karl@jorgensen.com
www.karl.jorgensen.com
==== Today's fortune:
* JHM wonders what Joey did to earn "I'd just like to say, for the record,
  that Joey rules."
	-- Seen on #Debian

Attachment: pgplLUSivtdAt.pgp
Description: PGP signature


Reply to: