Re: [CentOS] [security] Thunderbird vulnerable to MITM

2015-08-24 Thread Alice Wonder
On 08/24/2015 04:07 AM, Leonard den Ottolander wrote: Hello, On Sat, 2015-08-22 at 08:05 -0700, Alice Wonder wrote: Thunderbird has a MITM vulnerability with its otherwise rather groovy auto-configuration feature. The problem is that it makes requests via HTTP to retrieve the auto configurat

Re: [CentOS] [security] Thunderbird vulnerable to MITM

2015-08-24 Thread Leonard den Ottolander
Hello, On Sat, 2015-08-22 at 08:05 -0700, Alice Wonder wrote: > Thunderbird has a MITM vulnerability with its otherwise rather groovy > auto-configuration feature. > > The problem is that it makes requests via HTTP to retrieve the auto > configuration information. > > This allows a black hat (

Re: [CentOS] [security] Thunderbird vulnerable to MITM

2015-08-23 Thread Alice Wonder
On 08/23/2015 10:17 AM, Always Learning wrote: Yes some people's version of politics is annoying. Politics ought to be about creating pragmatic solutions for the public good rather than enforcing brain-dead dogma. MariaDB is a so-called "drop-in" replacement for MySQL although I understand v

Re: [CentOS] [security] Thunderbird vulnerable to MITM

2015-08-23 Thread Always Learning
On Sun, 2015-08-23 at 07:57 -0700, Alice Wonder wrote: > I stopped using Fedora because as soon as it was stable it was end of > life and I was forced to install a new bleeding edge unstable version. I am 'conservative' too. Once something is working well I do not wish to change it unless ther

Re: [CentOS] [security] Thunderbird vulnerable to MITM

2015-08-23 Thread Alice Wonder
On 08/23/2015 07:25 AM, Always Learning wrote: On Sat, 2015-08-22 at 08:05 -0700, Alice Wonder wrote: Thunderbird has a MITM vulnerability with its otherwise rather groovy auto-configuration feature. https://librelamp.com/FooBird#security has what I think would be the easiest solution wh

Re: [CentOS] [security] Thunderbird vulnerable to MITM

2015-08-23 Thread Always Learning
On Sat, 2015-08-22 at 08:05 -0700, Alice Wonder wrote: > Thunderbird has a MITM vulnerability with its otherwise rather groovy > auto-configuration feature. > https://librelamp.com/FooBird#security > > has what I think would be the easiest solution while keeping the > ability to auto-configure