Thanks Bruce and Rod!

I think you've answered my question.

If we were to use SSL - and "force" it, would that take the non secure
"LOGIN" authentication method away from the server - or would it still
announce that - along with the other methods?

It's funny - I just had the conversation with a member of the team that I'm
working with to try and get IMail to pass through this Qualys reporting and
they didn't seem to care that even though the login / authentication would
be secure that the message content may not be...

Call me crazy - but that just seems backwards to me.

Thanks for your help guys!  I feel like I understand the options a bit more.


JASON NADON
User Services - Web Administrator
Creative Solutions | A Thomson Company
800.968.0600 x3636
[EMAIL PROTECTED]
 
"workin' more web than Spider-Man"

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bruce Barnes
Sent: Thursday, July 07, 2005 11:56 PM
To: [email protected]
Subject: RE: (SPF-None) Re: (SPF-None) RE: [IMail Forum] Force Encrypted
Authentication on SMTP

Then you can either force authentication for EVERYONE - ALL THE TIME and use
SSL or ask those who want remote access to use the web interface and use the
SSL option on the web interface.

If you are concerned about security, then there are options to encrypt the
message between the CLIENT and the SERVER.  Remember, however, that MOST of
the connections between e-mail servers are using PLAIN TEXT to send messages
and attachments and nothing within any message is secure unless the entire
message has been encrypted.

Bruce Barnes
ChicagoNetTech Inc

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Rod Dorman
Sent: Thursday, July 07, 2005 16:48
To: [email protected]
Subject: (SPF-None) Re: (SPF-None) RE: [IMail Forum] Force Encrypted
Authentication on SMTP


On Thursday, July 7, 2005, 16:50:54, Bruce Barnes wrote:
>  ...
> I have several users who travel all over the world and, since
> upgrading and enabling 587 and having them switch their SMTP server
> setting to that port we have not had a single problem with those users
> authenticating - no matter who the provider is.

The issue isn't can they authenticate, its can they authenticate without
their password being compromised.

--
[EMAIL PROTECTED]     "The avalanche has already started, it is too
Rod Dorman              late for the pebbles to vote." - Ambassador Kosh


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to