On Thu, 3 Nov 2011, Steve Holme wrote:

>> That will just cause the reversed problem: if you have a POP3 connection
>> without SSL and one _with_ SSL you don't want them to match.
>
> Surely a POP3 connection upgraded to TLS is not the same as a POP3S
> connection, so I don't believe you would want these to match.

They are indeed virtually the same - the only difference is how it got to the
SSL state. But they mostly won't match anyway primarily since you would use
different port numbers for them.

> However, the existing implementation will match a new POP3S connection with
> an existing POP3 connection that has been upgraded to TLS.

I can't think of any downsides with that.

> Also, do we want to work on fixing this for v7.23?

If we can come up with a fix we believe in, sure!

-- 
  / daniel.haxx.se
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html