quoth the Michael Sullivan: > I upgraded dovecot the other day to 1.0.beta3 and I was altering the > configuration file trying to get it to work when I discovered something > disturbing: our passwords were being trasmitted unencrypted across the > Internet!
Well, strait from the RFC we learn that POP3 protocol is plain text. Before settling on digest-md5 (or any other method) for authentication you may want to check that the clients you will be using support it. This documentation will get you up to speed on your options: http://wiki.dovecot.org/Authentication -d -- darren kirby :: Part of the problem since 1976 :: http://badcomputer.org "...the number of UNIX installations has grown to 10, with more expected..." - Dennis Ritchie and Ken Thompson, June 1972
pgpGSkIFOjxoo.pgp
Description: PGP signature
