Re: [bug-mailutils] Re: tls problems

[Sergey Poznyakoff]

> 
> fetchmail: 6.1.2 querying natura (protocol IMAP) at Sat Jan 18 23:55:39 200=
> 3: poll started
> fetchmail: IMAP< * OK IMAP4rev1
> fetchmail: IMAP> A0001 CAPABILITY
> fetchmail: IMAP< * CAPABILITY IMAP4rev1 NAMESPACE X-VERSION AUTH=3DGSSAPI
[...] 
> Shouldn't the CAPABILITY reply advertise TLS? It appears not use it.

Yes, it should show STARTTLS string. If it doesn't, this means some problems
with the certificate/key files. Imap4d reports the exact reason through 
syslog.

> Right. So basically it's just encrypting the login sequence, unlike
> imaps which encrypts the whole transaction, right?

No, once the TLS negotiation has succeeded, every IMAP transaction passes
through TLS layer, not only authentication stage. So the whole session
is encrypted except the initial OK answer and CAPABILITY request/reply.

> Is having full ssl support a goal in mailutils TODO?

The more features mailutils provides the better :^)

Regards,
Sergey