• Problem with GMail changing sslfingerprint (Fetchmail + Mutt)

    From =?UTF-8?Q?H=C3=A9ctor?= Abreu@21:1/5 to All on Sun Jan 17 17:19:34 2021
    Hi,

    I work via ssh using Mutt + Fetchmail and GMail POP3 service. I
    frequently stop receiving emails because the sslfingerprint is
    changed, and when I enter the new value in .fetchmailrc and go to
    GMail settings to re-enable POP3, GMail settings offers me the option
    of downloading all the messages again or only messages starting from
    that very moment; I choose the latter, so I lose in my email client
    all the messages from the moment the sslfingerprint was changed until
    the moment I adjust its value to the new one and re-enable GMail POP3
    settings. This is very annoying.

    My .fetchmailrc looks like this:

    set daemon 600

    poll "pop.gmail.com" with proto POP3
    port 995 user "my_email@gmail.com"
    password "my_password"
    sslfingerprint "6A:11:7A:51:A1:B1:D1:EF:ED:52:C3:0C:15:8F:A8:54"
    no rewrite keep ssl nofetchall
    mda "/usr/bin/maildrop"

    I'm looking for a solution even if it is to stop using GMail, which
    I'm planning anyway. I'd like to hear about alternative services who
    are Fetchmail and Mutt friendly. I'm planning to use gpg for privacy,
    too.

    Thank you in advance for any hint or help.

    Regards,

    --
    Héctor Abreu

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Tavis Ormandy@21:1/5 to invalid@invalid.invalid on Sun Jan 17 18:40:24 2021
    On 2021-01-17, Héctor Abreu <invalid@invalid.invalid> wrote:
    sslfingerprint "6A:11:7A:51:A1:B1:D1:EF:ED:52:C3:0C:15:8F:A8:54"

    Why not use sslcertck instead of hardcoding the fingerprint?

    Tavis.

    --
    _o) $ lynx lock.cmpxchg8b.com
    /\\ _o) _o) $ finger taviso@sdf.org
    _\_V _( ) _( ) @taviso

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)