Filed as normal, as the README.Debian currently has a half solution.

The postinst correctly adds 'I accept the risk' to /etc/c-client.cf, as
is apparantly required. However, this isn't at all document in
README.Debian, hence people manually changing the configuration won't
succeed.

By the way, isn't is possible to remove this weird requirement? Users
setting that option (should) know what they do, and if they don't
provide that 'I accept the risk', they get no hint whatsoever why their
configuration option isn't obeyed (the latter being a bug in itself
IMHO).

It goes without saying that removal of this requirement is preferred
with me.

severity 266689 wishlist
thanks

README.Debian refers to the upstream imaprc.txt as the requirement is an
upstream one, and the very reason seems to be that only those who have
properly read and understood that document (which personally took me
quite some time and frustrated failed attempts) are worthy of messing
with the options.


I am currently preparing a new release that does not even add the stuff
in postinst any longer - it is too much of a hassle to maintain it
correctly.

You will have to discuss that with upstream. I do not myself believe it
possible to convince him, but please give it a try - I'd appreciate the
change as well.

Hereby lowered to wishlist.


 - Jonas

You can re-enable plaintext logins if you really want:

$ cat /etc/c-client.cf
I accept the risk
set disable-plaintext nil
$

Unfortunately, this is only half-way documented in
/usr/share/doc/libc-client2002edebian/README.Debian, see #266689. I
admit to not really have followed up yet to that bug, but my position
still is that if the 'set disabled-plaintext nil' is documented, the
other line required should be documented too.