Jay Lee writes:

> Sam Varshavchik wrote:
>> [EMAIL PROTECTED] writes:
>>
>>> I've been looking through the config file (and read the docs a few
>>> times).
>>>  I'm sure there's a way to disable SSLv2 connections in the config but
>>> can't find out how.  Can anyone help?
>>
>> If you do not want to start the SSL service, just don't run the
>> imapd-ssl script.
>
> Sam,
>
>   I think he was referring to the SSLv2 protocol itself as oppossed to
> SSL v3 and TLS v1.  SSLv3 was released in 1996 making SSLv2 extremly old
> and insecure.  Firefox has disabled SSLv2 in 2.0 and I believe IE7 has
> done the same.

>Looking into this further, SSL2 cannot be turned off in the configuration
>file. This will be a small code change.

I was referring to SSLv2 vs v3.

Sam,

Not sure if this is the proper list for feature requests, but is there a
chance that this code change will happen in the next release?

Thanks again for your time...

Adam


-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Courier-imap mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-imap

Reply via email to