On Thursday, July 7, 2005, 15:35:35, Nadon, Jason wrote: > Is there any way to force the use of a secure method of encryption > when authenticating SMTP traffic? > ... > Your SMTP server specifies PLAIN or LOGIN as available authentication > methods. The authentication credentials are transmitted in plain text > over the network and no encryption is performed. > > I know that I can enable SSL/TLS, but is there a way to force it, or > not allow plain text to be passed?
Unless there's some undocumented registry tweak IMail always announces 250-AUTH LOGIN CRAM-MD5 250-AUTH=LOGIN which means correctly working e-mail clients can choose between LOGIN or CRAM-MD5. Broken clients can only choose LOGIN. LOGIN is insecure and it would be nice to be able to disable announcing it as an option but then broken e-mail clients wouldn't be able to AUTH. -- [EMAIL PROTECTED] "The avalanche has already started, it is too Rod Dorman late for the pebbles to vote." Ambassador Kosh To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
