[Imaplib2-devel] Re: STARTTLS and certificates Re:[ANNOUNCE] OfflineIMAP v6.3.4-rc3 released
nicolas.s-dev at laposte.net
Mon Jul 11 17:31:19 BST 2011
[ Re-adding people in cc. ]
On Mon, Jul 11, 2011 at 11:27:28AM +1000, Piers Lauder wrote:
> Hi Nicholas,
> New version checked in.
> Had to make a cople of minor changes
> - can you test that it works as advertised?
> Incidentally, I assume the call-back function is explicitly supposed to
> check that the hostname in the certificate matches the passed hostsname,
> right? In which case I'll document that.
Sorry, I don't know the details enough to answer or test it out.
Also, I guess the current change in imaplib2 is not sufficient to fix
our main STARTTLS security issue and OfflineIMAP may need some
Any taker, please?
More information about the OfflineIMAP-project