Re: Rationale for this change?

[David Kastrup]

Simon Josefsson <address@hidden> writes:

> David Kastrup <address@hidden> writes:
>
>> 2005-12-05  Ralf Angeli  <address@hidden>
>>
>>      * mail/smtpmail.el (smtpmail-try-auth-methods):
>>      Send credentials together with "AUTH PLAIN" command.
>>
>> Could you shed any light on what problem this change is intended to
>> fix?
>
> The AUTH PLAIN command is not sent if the server did not advertise
> support for AUTH PLAIN.  See RFC 2554.  The earlier behavior violated
> a SHOULD in RFC 2222 § 5.1.
>
> So security-wise, it is not worse than before.

Ah, ok.  I think rationales like that should be mentioned in the
ChangeLog.  Even if just as "(RFC 2222 § 5.1)".

-- 
David Kastrup, Kriemhildstr. 15, 44793 Bochum