atom feed6 messages in net.sourceforge.lists.courier-usersRe: [courier-users] disable USER/PASS...
FromSent OnAttachments
Martin StrandDec 11, 2008 8:10 am 
Toma DanielDec 11, 2008 9:06 am 
Sam VarshavchikDec 11, 2008 3:51 pm 
Martin StrandDec 11, 2008 4:49 pm 
Sam VarshavchikDec 11, 2008 7:05 pm 
Martin StrandDec 11, 2008 11:28 pm 
Subject:Re: [courier-users] disable USER/PASS login?
From:Toma Daniel (me@tomadaniel.org)
Date:Dec 11, 2008 9:06:00 am
List:net.sourceforge.lists.courier-users

Hello,

The recommended way would be to allow only SSL secured connections made from public networks.

I think it is rather pointless to encrypt the password only but leave the message content available for sniffing.

Don't you agree ?

Regards.

Using courier-pop3d, is there any way to disable simple USER/PASS login so that only AUTH login with CRAM-SHA1 works? I tried setting POP3DAUTH="CRAM-SHA1" but USER/PASS still works...