[Users] gmail certs

Colin Leroy colin at colino.net
Wed May 28 17:09:02 CEST 2014


On Wed, 28 May 2014 13:47:05 +0000 (UTC), Bruce Bowler
<bbowler at bigelow.org> wrote:

> At least daily, for the last week or 2, I get a popup that there's a
> new gmail cert.  If I'm sitting in front of the computer and catch
> it, and click accept and save, claws continues and life is good
> (until the next time).  If I'm not here, claws spits out a different
> message (can't connect?).  

It's probably that time where Gmail rolls out new certificates in a
sequential manner, making each connection to a different server present
a different certificate, and prompting Claws Mail to ask whether it's
OK.

Now that we have proper certificate chain verification, I'm starting to
wonder whether we should accept correctly signed certificates
automatically.

-- 
Colin



More information about the Users mailing list