bug#28597: 26.0.60; [Security] Configure should use --without-pop by default

[Paul Eggert]

On 10/02/2017 10:32 AM, Eli Zaretskii wrote:
> POP3 is not something movemail will silently use
> by itself, the user needs to specify a POP3 "url", referencing the
> server and the user's id (and possibly a password as well) for it to
> do so.  So the user who does that_knows_  they use POP3.

I'm dubious. These days, email clients often use some sort of secure 
connection by default even if you just ask for POP. For example, 
Thunderbird's mail account setup defaults to IMAP, but if you specify 
POP3 it then defaults to autodetecting SSL/TLS or STARTTLS; you must 
explicitly override the default (or specify a server that does not 
support encryption) to get an unencrypted connection.

Users accustomed to other email clients are likely to expect that Emacs 
"pop:whatever" will do something similar.