I don't think there is much interest in having a pop3 daemon in base due to the use of plain-text passwords but if you want to check out a copy the old one, you can do it like this:
cvs get -rOPENBSD_5_4 src/usr.sbin/popa3d The DESIGN file in that directory describes the security model. - todd
