Re: [fetchmail-users] Secure SMTP support?

[Grant E. <gra...@gm...>]

On 2014-04-04, Matthias Andree <mat...@gm...> wrote:
> Am 03.04.2014 23:29, schrieb Grant Edwards:
>>
>> The last time I tried to set up fetchmail, it seemed to support
>> SSL-wrapped IMAP and POP3 but not SMTP.
>>
>> Is that still the case?
>>
>> Why support SSL-wrapped IMAP and POP but not SMTP?
>>
>> I would think the infrastructure required to support IMAP/POP over
>> SSL would work just as well for supporting SMTP over SSL.  In all
>> cases you're just connecting to a server using SSL and then running
>> the exact same protocol on top of the SSL connection -- right?
>
> This would require some more code, especially for STARTTLS support,
> that have not been written yet.  But you're right, the infrastructure
> is there.

In my googling, I didn't find anybody who wanted STARTTLS support,
just standard pop3s.  If one were to submit a patch adding support for
pop3s, would it be accepted?  [I've learned the hard way to ask before
starting work on new features for open-source projects.]

> The code has not yet been written because the assumption was that
> fetchmail would predominantly be used on the same computer as your
> SMTP server software, through "localhost" (which is the default), and
> it has been consequently assumed that that connection is trusted.

I'm currently using stunnel as a work-around, but it's rather tedious
having to set up a second service and make sure the two services start
up in the correct order.

-- 
Grant