> The standard port for POP3-over-SSL is port 995. That's what GMail is
>using, so they're not doing anything non-standard wrt ports. I can only
>guess the reasons that GMail requires POP3-over-SSL and my guess would
>be that the SSL-encrypted connection prevents password sniffing, to
>which standard POP3 connections are vulnerable.

Sorry, I didn't mean to imply that the POP over SSL on 995 was non 
standard... I just meant that Gmail is not using port 110. (in other 
words, not only would emailer need to support SSL, but it would ALSO have 
to support use of alternate ports)

As to their Why, yes, I agree, it probably is for increased security. I 
just don't know why they really care, other than they are high profile, 
and they are worried someone will sniff the POP traffic and thus have 
passwords to use for authenticated SMTP traffic.

But really, they shouldn't be at any higher risk then any other high 
profile email host (like Earthlink). But then again, maybe they are just 
the first to be proactive in this respect, and other hosts will follow 
suit (in fact, ISTR AT&T did this with their dialup service email a while 
back).

-chris
<http://www.mythtech.net>

___________________________________________________________________________
To unsubscribe send a mail message with a SUBJECT line of "unsubscribe" to
<[EMAIL PROTECTED]>  or  <[EMAIL PROTECTED]>

Reply via email to