At 10:41 AM -0500 2/6/03, Alan Brown wrote:
> As a result, roaming users need to use the MSA port instead of SMTP and
> there are security issues involved with using plaintext SMTP AUTH - as
> in anyone can read the passwords if they happen to be sniffing the
> traffic(*), so you'd better use SSL too.
A chain is as strong as its weakest link. Meaning, that POP AUTH uses
plaintext too, of course; so, unless they use SSL on their POP connections
as well, users should not bank real money on their passwords being
unsniffable.
- Mark
System Administrator Asarian-host.org
---
"If you were supposed to understand it,
we wouldn't call it code." - FedEx
