Re: The most secure POP server

[Thomas Neumann]

"Brett Randall" <[EMAIL PROTECTED]> writes:

> Ok, here's the deal:
> 
> qmail-pop3d is NOT secure, nor are most other standard POP3 daemons. POP
> passwords are sent in cleartext and are not encrypted. They can be viewed by
> people snooping a connection (although this is not as easy as it sounds). A
> way of fixing this insecurity is to use SSL, [...]

As long as you're only concerned about the password and not about the
security of the message content itself you can also do APOP, but this
is an issue with checkpassword and not qmail-pop3d itself.

Many of our users, including myself, prefer APOP. If I want
a secure message body I use PGP.

-t