Re: [courier-users] disable USER/PASS login?

2008-12-11 Thread Martin Strand
On Fri, 12 Dec 2008 04:05:58 +0100, Sam Varshavchik wrote: > Martin Strand writes: > >> On Fri, 12 Dec 2008 00:51:23 +0100, Sam Varshavchik >> wrote: >> >>> Martin Strand writes: >>> Using courier-pop3d, is there any way to disable simple USER/PASS login so that only AUTH login with

Re: [courier-users] disable USER/PASS login?

2008-12-11 Thread Sam Varshavchik
Martin Strand writes: On Fri, 12 Dec 2008 00:51:23 +0100, Sam Varshavchik wrote: Martin Strand writes: Using courier-pop3d, is there any way to disable simple USER/PASS login so that only AUTH login with CRAM-SHA1 works? I tried setting POP3DAUTH="CRAM-SHA1" but USER/PASS still works...

Re: [courier-users] disable USER/PASS login?

2008-12-11 Thread Martin Strand
On Fri, 12 Dec 2008 00:51:23 +0100, Sam Varshavchik wrote: > Martin Strand writes: > >> Using courier-pop3d, is there any way to disable simple USER/PASS login so >> that only AUTH login with CRAM-SHA1 works? >> I tried setting POP3DAUTH="CRAM-SHA1" but USER/PASS still works... > > USER/PASS is

Re: [courier-users] disable USER/PASS login?

2008-12-11 Thread Sam Varshavchik
Martin Strand writes: Using courier-pop3d, is there any way to disable simple USER/PASS login so that only AUTH login with CRAM-SHA1 works? I tried setting POP3DAUTH="CRAM-SHA1" but USER/PASS still works... USER/PASS is always permitted. There is no toggle to turn it off. pgphYD3ZRWM8Q.pgp

Re: [courier-users] disable USER/PASS login?

2008-12-11 Thread Toma Daniel
Hello, The recommended way would be to allow only SSL secured connections made from public networks. I think it is rather pointless to encrypt the password only but leave the message content available for sniffing. Don't you agree ? Regards. Toma Daniel, Technical Consultant / AXIGEN http://

[courier-users] disable USER/PASS login?

2008-12-11 Thread Martin Strand
Using courier-pop3d, is there any way to disable simple USER/PASS login so that only AUTH login with CRAM-SHA1 works? I tried setting POP3DAUTH="CRAM-SHA1" but USER/PASS still works... Thanks, Martin -- SF.Net email is S