~soywod/pimalaya#201: 
Bug report: Unsafe IMAP login with 163 emails

Dear developers,

I am using himalaya cli to receive emails from my 163 mailbox with IMAP protocol, and received error message: "cannot exec imap action: No Response: SELECT Unsafe Login. Please contact kefu@188.com for help, attempt (1)".

I've tried searching this error and find an official page which tells the developers of third-party email client to "bring IMAP ID information when connecting to the server".

Official help guide about unsafe login from 163:

https://help.mail.163.com/faqDetail.do?code=d7a5dc8471cd0c0e8b4b8f4f8e49998b374173cfe9171305fa1ce630d7f67ac2eda07326646e6eb0

I also searched the sourcehut bug tracker of pimalaya with keyword "163" and did not find the same issue.

I'm sincerely looking forward to your reply and fix.

Status
REPORTED
Submitter
HY D
Assigned to
No-one
Submitted
3 months ago
Updated
2 months ago
Labels
No labels applied.

~soywod 3 months ago

Hi,

I am using himalaya cli to receive emails from my 163 mailbox with IMAP protocol, and received error message: "cannot exec imap action: No Response: SELECT Unsafe Login".

I've tried searching this error and find an official page which tells the developers of third-party email client to "bring IMAP ID information when connecting to the server".

I think you are refering the the IMAP ID extension of the RFC2971:

https://datatracker.ietf.org/doc/html/rfc2971

Bad news: this extension is actually not supported by the IMAP library Himalaya is using.

Good news: I am actually replacing the current IMAP library with a more advanced one, which supports the ID extension:

https://github.com/duesee/imap-codec/blob/a79d4e02f60a760e86bcb966b5e3f27ae65f7b95/imap-codec/src/extensions/id.rs

So I would advise to wait for the next release.

I let you know,

-- Regards Clément DOUIN https://soywod.me

HY D referenced this from #201 2 months ago

HY D 2 months ago · edit

Thanks very much for your timely response!

~soywod outgoing@sr.ht 于2024年4月23日周二 21:24写道:

Hi,

I am using himalaya cli to receive emails from my 163 mailbox with IMAP protocol, and received error message: "cannot exec imap action: No Response: SELECT Unsafe Login".

I've tried searching this error and find an official page which tells the developers of third-party email client to "bring IMAP ID information when connecting to the server".

I think you are refering the the IMAP ID extension of the RFC2971:

https://datatracker.ietf.org/doc/html/rfc2971

Bad news: this extension is actually not supported by the IMAP library Himalaya is using.

Good news: I am actually replacing the current IMAP library with a more advanced one, which supports the ID extension:

https://github.com/duesee/imap-codec/blob/a79d4e02f60a760e86bcb966b5e3f27ae65f7b95/imap-codec/src/extensions/id.rs

So I would advise to wait for the next release.

I let you know,

-- Regards Clément DOUIN https://soywod.me

-- View on the web: https://todo.sr.ht/~soywod/pimalaya/201#event-347062

~soywod 2 months ago

I am using himalaya cli to receive emails from my 163 mailbox with IMAP protocol, and received error message: "cannot exec imap action: No Response: SELECT Unsafe Login".

After analysis, it looks like 163 is enforcing sth that is not part of the standard. Any IMAP extension should not never mandatory to access to your emails, yet 163 forces you to send ID before selectin a folder.

https://github.com/modern-email/defects/issues/25

We would like to debug a bit more, yet we don't have a 163 account, and unfortunately we don't speak Chinese. Could you please create for us a fake testing account with the name pimalaya.org?

-- Regards Clément DOUIN https://soywod.me

HY D 2 months ago · edit

Sorry for the late reply. I have registered a testing 163 email account "pimalaya@163.com" (The account name is "pimalaya" but not "pimalaya.org" because a fee is required for the latter name). The password of this account has been sent to Soywod's email bound to GitHub from the test email account, and feel free to debug with this account.

~soywod 2 months ago

I have registered a testing 163 email account "pimalaya@163.com", feel free to debug with this account.

I really appreciate, thanks a lot! I let you know whenever I have news about your initial issue.

-- Regards Clément DOUIN https://soywod.me

Register here or Log in to comment, or comment via email.