-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 2 Jun 00, at 10:47, John Stile wrote:
> If pop3d is insecure, what is secure?
> I don't want to setup something that is broken from the get-go.
POP3 protocol is insecure because it requires transmitting
password in plaintext over a network. (If you have pop3 only on a
switched LAN with no option of sniffing, pop3 is perfectly safe.)
APOP is a safer alternative of pop (and I believe qmail supports
APOP as well) but it requires APOP-capable clients.
You may also try to setup POP3 through SSL tunnel or over SSH
port forwarding (both setups are safe).
[I don't know if IMAP is secure or insecure in password
transmission; I never liked the beast.]
-----BEGIN PGP SIGNATURE-----
Version: PGP 6.0.2 -- QDPGP 2.60
Comment: http://community.wow.net/grt/qdpgp.html
iQA/AwUBOTfl/FMwP8g7qbw/EQIsjwCff9lJHRNycu1PxIFp3RzHpI7d5XQAoKuj
ZNrMfOsIwpBFWfx+rc65BI0C
=r111
-----END PGP SIGNATURE-----
--
Petr Novotny, ANTEK CS
[EMAIL PROTECTED]
http://www.antek.cz
PGP key ID: 0x3BA9BC3F
-- Don't you know there ain't no devil there's just God when he's drunk.
[Tom Waits]
