https://bugs.kde.org/show_bug.cgi?id=423426
Bug ID: 423426
Summary: POP3 setup wizard defaults to unencrypted connections.
Product: kmail2
Version: 5.13.3
Platform: Other
OS: Linux
Status: REPORTED
Severity: normal
Priority: NOR
Component: general
Assignee: kdepim-b...@kde.org
Reporter: 93s4m32gd2ab8...@mailbox.org
Target Milestone: ---
The setup wizard in kmail defaults to unencrypted connections. When the user
clicks on "Check Mail" after the setup, the username and password are sent in
the clear. I have not found a way to tell kmail in the manual configuration to
use implicit TLS or STARTTLS.
What is even worse: assuming you know about that and try to configure STARTTLS
directly after the setup. In this case it happens that future connections still
happen unencrypted, even though the UI tells otherwise. I clicked on "Restart"
in the UI several times and also restarted Akonadi and KMail. In this case, I
found that POP3 was once even reset back to "Unencrypted". After few more tries
it seems to have settled down to use STARTTLS.
I am using NixOS with kmail2 5.13.3 (19.12.3).
--
You are receiving this mail because:
You are watching all bug changes.
