What version are you running? Fetchmail already shrouds passwords. If
you're seeing them, that's a bug.
I'm running package fetchmail-ssl 5.8.1-3 from Debian woody i386.
Did the same with hand-compiled ssl-enabled fetchmail 5.5.1.
The password shows specifically using fetchmail -v with the IMAP protocol.
Protocol POP3 correctly shows "*" (quotes not included) instead of the
password. Protocol APOP shows what looks like to be some cryptographic
challenge, which IMO is either useless or harmful and should be removed, too.
BTW, I'd appreciate some middle term between --verbose and lack thereof,
that would show progress in connection, without drowning me in lots of
irrelevant (to me) protocol-specific crap. Maybe several levels of verbose?
Yours freely,
[ François-René ÐVB Rideau | Reflection&Cybernethics | http://fare.tunes.org ]
[ TUNES project for a Free Reflective Computing System | http://tunes.org ]
Economics is the plural of Morality -- L'économie, c'est la morale à plusieurs.