Package: mail-notification Tags: security It's been reported that when you disable SSL at build-time, the user is not told that connections are unencrypted:
| Mail Notification 4.0, when WITH_SSL is set to 0 at compile time, uses | unencrypted connections for accounts configured with SSL/TLS, which | allows remote attackers to obtain sensitive information by sniffing | the network. <http://idssi.enyo.de/tracker/redirect/CVE-2007-3209> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

