> [EMAIL PROTECTED]:

> Yes, but if you use APOP, the password goes out in the clear but is
> useless afterwards.  Any client I can think of, including Eudora on my

no, apop challenges the client which has to respond with an encrypted version
of the password thus verifiable at the server.  you can reuse that password
as often as you like, but the challenge string and the answer will change
each time.

clemens

Reply via email to