From 9143ea5b93fc5781b54c06c329fa90345a8ac9a8 Mon Sep 17 00:00:00 2001 From: Nicolas Sebrecht Date: Tue, 22 Sep 2015 09:07:21 +0200 Subject: [PATCH] man page: fingerprint can be used with SSL Signed-off-by: Nicolas Sebrecht --- docs/offlineimap.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/offlineimap.txt b/docs/offlineimap.txt index 618f2ab..e547f6d 100644 --- a/docs/offlineimap.txt +++ b/docs/offlineimap.txt @@ -259,8 +259,8 @@ out the connection that is used by default. + Unfortunately, by default we will not verify the certificate of an IMAP TLS/SSL server we connect to, so connecting by SSL is no guarantee against -man-in-the-middle attacks. While verifying a server certificate fingerprint is -being planned, it is not implemented yet. There is currently only one safe way +man-in-the-middle attacks. While verifying a server certificate checking the +fingerprint is recommended. There is currently only one safe way to ensure that you connect to the correct server in an encrypted manner: you can specify a 'sslcacertfile' setting in your repository section of offlineimap.conf pointing to a file that contains (among others) a CA