On Thu, Mar 01, 2007 at 06:31:31PM -0500, [EMAIL PROTECTED] wrote:
> 
> Hi, Sam - i wouldn't mind changing that banner too. The reason - i don't 
> want people knowing what IMAP server i ran. Just like my postfix is giving 
> generic smtp banner. Even if i patch everything ontime, there maybe specific 
> scripted attacks. Now - i haven't seen any serious security issues with 
> Courier (thank you and all the other coders), so it's not an urgent problem, 
> but still....
> 
Well, security through obscurity is not very sound.  Besides, hiding
what IMAP server you run, while allowing people to use insecure
clear-text protocols seems sort of like rearranging deck chairs on the
Titanic.

If your system is properly secured, it should not matter if people know
what IMAP server (or really any other server) you are running.

Regards,

-Roberto

-- 
Roberto C. Sanchez
http://people.connexer.com/~roberto
http://www.connexer.com

Attachment: signature.asc
Description: Digital signature

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Courier-imap mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-imap

Reply via email to