On 15 Jul 2014, at 23:13, Michael M Slusarz <slus...@curecanti.org> wrote:

>>> For the "more than 50% market share" of Dovecot / Cyrus, do you have a
>>>> breakdown by version number? At least in terms of 1.* vs 2.0 and higher?
>>>> 
>>> 
>>> I do not.
>> 
>> 
>> And without being able to get a version number from a Dovecot session (or
>> so it seems to me -- nothing returned from ID...).... it looks kind of sad.
> 
> ID extension is pretty much worthless for version identification.  It is 
> trivially spoofed -- and some servers do exactly this in the real world.  All 
> it takes is one server/version to be spoofed to make that data worthless.
> 
> It's possible to do some level of basic version sniffing by things like 
> banner messages, Human-readable responses, CAPABILITY lists, and ordering of 
> responses to various commands.  However, this is really only useful for broad 
> statistical surveys and not precise version determination.

Here are some interesting results based on such survey: 
http://openemailsurvey.org/dovecot-versions.png

Reply via email to