598117 - [config] Correct comcast.net: no password encryption possible

Status: RESOLVED FIXED

(Webtools :: ISPDB Database Entries, defect)

Description

[Ben Bucksch (:BenB)]

Some pseudonymous guy on the mdat newsgroup wrote:
"Whoever is in charge of this Comcast DOES NOT encrypt their e-mail passwords."

He's right. Our config has password-encrypted, but the servers don't send that capability (anymore?).

Attaching patch. Critical, because this leads to broken configs.

Comment 1

[Ben Bucksch (:BenB)]

https://live.mozillamessaging.com/autoconfig/v1.1/comcast.net

Comment 2

[Ben Bucksch (:BenB)]

Attachment: Changing from encrypted to plaintext

Comment 3

[Ben Bucksch (:BenB)]

Try:
openssl s_client -connect smtp.comcast.net:587 -starttls smtp
EHLO foobar
s_client -connect mail.comcast.net:110 -starttls pop3
CAPA
No "CRAM-MD5" to see.

Comment 4

[David :Bienvenu]

I set up a pop3 comcast account with autoconfig a couple days ago and it set up a normal password, not an encrypted one. Any idea why that would have worked?

Comment 5

[Ben Bucksch (:BenB)]

bienvenu: bug in account wizard. Even for XML accounts, we run through verifyConfig() which can downgrade the password security and change the username. That's unintended and something I wanted to fix long ago. It does help here, though.

Comment 6

[Ben Bucksch (:BenB)]

> verifyConfig() which can downgrade the password security and change the
> username.

(that was for guessed configs)

Comment 8

[Ben Bucksch (:BenB)]

Commited as SVN revision 75334
FIXED