The POP password is transmitted in clear text. I've blocked the POP port number to my toaster to force users to use POP-SSL.
_____ From: Jake Vickers [mailto:[EMAIL PROTECTED] Sent: Monday, January 08, 2007 3:30 PM To: [email protected] Subject: Re: [qmailtoaster] vchcpw-pop3 Dan Herbon wrote: Shameless bump, anyone have any idea? Thanks _____ From: Dan Herbon [mailto:[EMAIL PROTECTED] Sent: Thursday, January 04, 2007 12:01 PM To: [email protected] Subject: [qmailtoaster] vchcpw-pop3 I've been tailing my /var/log/maillog log watching pop logins and I had a quick question. The log shows the following: ------------- mailserver vpopmail[12746]: vchkpw-pop3: (PLAIN) login success [EMAIL PROTECTED]:66.*.*.* ------------- My question is, what does the PLAIN mean? Does that mean its sending the passwords in clear plain text? As far as I know, yes. Unless you run POP3-SSL or TLS then it is unencrypted.
