4 ms·
Does this use SSL to grab the emails?
by andrewpi 14y ago
Does this use SSL to grab the emails?
- callahad 14y agoBe default, yes: https://github.com/gaubert/gmvault/blob/master/src/gmv/imap_utils.py#L194 https://github.com/gaubert/gmvault/blob/master/src/gmv/imap_... However, if I recall correctly, Python's built-in SSL support doesn't do certificate verification, so you're still completely open to man in the middle attacks.
- SoftwareMaven 14y agoThat's a good point, and a tool like this probably really should be verifying the host. (To the author) See http://stackoverflow.com/questions/1087227/validate-ssl-certificates-with-python http://stackoverflow.com/questions/1087227/validate-ssl-cert... for multiple options to accomplish this.