git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: [PATCH v2 2/3] git-send-email: die on invalid smtp_encryption

From
Drew DeVault <sir@cmpwn.com>
Date
Apr 12, 2021, 12:33 UTC
Message-ID
<CALQY92B6OVL.2Z59Y6W51BU4Y@taiga>
In-Reply-To
<87zgy4egtp.fsf@evledraar.gmail.com>
On Sun Apr 11, 2021 at 3:56 PM EDT, Ævar Arnfjörð Bjarmason wrote:
> I suggest we don't compromise and just go with whatever you're OK with :)

Well, if you're giving me an opportunity to not drag this out into a multi-phase rollout, then I'll take it :)

Another option is to forbid an unknown value (which is almost certainly (1) wrong and (2) causing users to unexpectedly use plaintext when they expected encryption), file a CVE, and pitch it as a security fix - then we can expect a reasonably quick rollout of the change to the ecosystem at large.

Previous: Ævar Arnfjörð BjarmasonNext: Ævar Arnfjörð Bjarmason
Message 11 of 24 in “git-send-email: improve SSL configuration”
  1. 0/3 git-send-email: improve SSL configurationDrew DeVault, Apr 11, 2021
  2. 1/3 git-send-email(1): improve smtp-encryption docsDrew DeVault, Apr 11, 2021
  3. Ævar Arnfjörð BjarmasonApr 11, 2021
  4. 2/3 git-send-email: die on invalid smtp_encryptionDrew DeVault, Apr 11, 2021
  5. Ævar Arnfjörð BjarmasonApr 11, 2021
  6. Drew DeVaultApr 11, 2021
  7. Ævar Arnfjörð BjarmasonApr 11, 2021
  8. Ævar Arnfjörð BjarmasonApr 11, 2021
  9. Drew DeVaultApr 11, 2021
  10. Ævar Arnfjörð BjarmasonApr 11, 2021
  11. Drew DeVaultApr 12, 2021
  12. Ævar Arnfjörð BjarmasonApr 12, 2021
  13. Drew DeVaultApr 13, 2021
  14. Ævar Arnfjörð BjarmasonApr 13, 2021
  15. Junio C HamanoApr 13, 2021
  16. 3/3 git-send-email: rename 'tls' to 'starttls'Drew DeVault, Apr 11, 2021
  17. Ævar Arnfjörð BjarmasonApr 11, 2021
  18. Drew DeVaultApr 11, 2021
  19. 0/2 send-email: simplify smtp.{smtpssl,smtpencryption} parsingÆvar Arnfjörð Bjarmason, Apr 11, 2021
  20. 1/2 send-email: remove non-working support for "sendemail.smtpssl"Ævar Arnfjörð Bjarmason, Apr 11, 2021
  21. Junio C HamanoApr 11, 2021
  22. Ævar Arnfjörð BjarmasonApr 11, 2021
  23. Ævar Arnfjörð BjarmasonMay 1, 2021
  24. 2/2 send-email: refactor sendemail.smtpencryption config parsingÆvar Arnfjörð Bjarmason, Apr 11, 2021

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.