Re: securing pop3 sessions

2000-05-28 Thread llu
llu wrote: [EMAIL PROTECTED] wrote: I'm using qmail 1.0.3 with the included qmail-pop3d. What's the best way on the server side to prevent passwords from being sent as clear text over the network for a pop3 session? I know users will be reluctant to change their mua's. So what can

Re: securing pop3 sessions

2000-05-25 Thread Magnus Bodin
On Thu, May 25, 2000 at 01:39:32AM -0400, llu wrote: [EMAIL PROTECTED] wrote: I'm using qmail 1.0.3 with the included qmail-pop3d. What's the best way on the server side to prevent passwords from being sent as clear text over the network for a pop3 session? I know users will be

Securing POP3 sessions

2000-05-25 Thread Jonathan Fortin
Using stunnel, you can add SSL dynamicly to your pop3 server... Just make sure you got an SSL capable mua.

Re: securing pop3 sessions

2000-05-25 Thread Peter Bieringer
At 23:03 24.05.2000 -0400, you wrote: Len Budney writes: Doesn't anybody implement APOP?? Qualcomm's Eudora since long time ago, i.e. 3.06 (freeware), also 4.x Peter

Re: securing pop3 sessions

2000-05-25 Thread esl
Magnus Bodin wrote: On Thu, May 25, 2000 at 01:39:32AM -0400, llu wrote: [EMAIL PROTECTED] wrote: I'm using qmail 1.0.3 with the included qmail-pop3d. What's the best way on the server side to prevent passwords from being sent as clear text over the network for a pop3 session?

Re: securing pop3 sessions

2000-05-25 Thread Louis Theran
[EMAIL PROTECTED] (Len Budney) writes: "Louis Theran" [EMAIL PROTECTED] wrote: [ using SSH forwarding to tunnel POP3 ] That's a dandy idea. However, once you do that it's not POP3 anymore. Nonsense. What exactly would you call the protocol running inside the tunnel if not POP3? ^L

Re: securing pop3 sessions

2000-05-25 Thread Bro. Len Budney
"Louis Theran" [EMAIL PROTECTED] wrote: [EMAIL PROTECTED] (Len Budney) writes: [ using SSH forwarding to tunnel POP3 ] That's a dandy idea. However, once you do that it's not POP3 anymore. Nonsense. What exactly would you call the protocol running inside the tunnel if not POP3? Um, the

Re: securing pop3 sessions

2000-05-25 Thread rino
Just my 2cents, I'm fetching emails via "fecthmail" thru SSH so yes you need OpenSSH installed in client and server side to have a secure channel. HTH On Thu, May 25, 2000 at 10:30:44PM -0400, Bro. Len Budney wrote: "Louis Theran" [EMAIL PROTECTED] wrote: [EMAIL PROTECTED] (Len Budney)

securing pop3 sessions

2000-05-24 Thread spacetask
I'm using qmail 1.0.3 with the included qmail-pop3d. What's the best way on the server side to prevent passwords from being sent as clear text over the network for a pop3 session? I know users will be reluctant to change their mua's. So what can I do on my side? Is there any way around this

Re: securing pop3 sessions

2000-05-24 Thread Len Budney
[EMAIL PROTECTED] wrote: What's the best way on the server side to prevent passwords from being sent as clear text over the network for a pop3 session? I'm afraid the best way is also the only way, and it doesn't exist. You cannot use POP3 without sending passwords in the clear. Len. --

Re: securing pop3 sessions

2000-05-24 Thread Adam McKenna
It is possible to wrap POP3 with SSL, which most mailers support. Take a look at http://www.rickk.com/sslwrap/ --Adam On Wed, May 24, 2000 at 03:38:53PM -0400, Len Budney wrote: [EMAIL PROTECTED] wrote: What's the best way on the server side to prevent passwords from being sent as

Re: securing pop3 sessions

2000-05-24 Thread Louis Theran
[EMAIL PROTECTED] (Len Budney) writes: [EMAIL PROTECTED] wrote: What's the best way on the server side to prevent passwords from being sent as clear text over the network for a pop3 session? I'm afraid the best way is also the only way, and it doesn't exist. You cannot use POP3

Re: securing pop3 sessions

2000-05-24 Thread spacetask
I was reading a howto about that and from what I understand, that's a client side deal. Louis Theran wrote: [EMAIL PROTECTED] (Len Budney) writes: [EMAIL PROTECTED] wrote: What's the best way on the server side to prevent passwords from being sent as clear text over the network for

Re: securing pop3 sessions

2000-05-24 Thread Len Budney
"Louis Theran" [EMAIL PROTECTED] wrote: My original comment was merely pointing out that `there is no way' is correct only in a narrow sense. Right; namely, the sense in which the poster asked. He asked for a way to modify the server ONLY, and end up using POP3 without any passwords traveling

Re: securing pop3 sessions

2000-05-24 Thread Bob Rogers
From: "Len Budney" [EMAIL PROTECTED] Date: Wed, 24 May 2000 15:38:53 -0400 [EMAIL PROTECTED] wrote: What's the best way on the server side to prevent passwords from being sent as clear text over the network for a pop3 session? I'm afraid the best way is also the only

Re: securing pop3 sessions

2000-05-24 Thread Russell Nelson
Len Budney writes: [EMAIL PROTECTED] wrote: What's the best way on the server side to prevent passwords from being sent as clear text over the network for a pop3 session? I'm afraid the best way is also the only way, and it doesn't exist. You cannot use POP3 without sending

Re: securing pop3 sessions

2000-05-24 Thread Russ Allbery
Russell Nelson [EMAIL PROTECTED] writes: Len Budney writes: I'm afraid the best way is also the only way, and it doesn't exist. You cannot use POP3 without sending passwords in the clear. Doesn't anybody implement APOP?? Even better, there are innumerable different authentication

Re: securing pop3 sessions

2000-05-24 Thread Patrick Berry
on 5/24/00 8:03 PM, Russell Nelson at [EMAIL PROTECTED] wrote: I'm afraid the best way is also the only way, and it doesn't exist. You cannot use POP3 without sending passwords in the clear. Doesn't anybody implement APOP?? The Gnome/Helixcode guys are working on an outlook type app that

Re: securing pop3 sessions

2000-05-24 Thread llu
[EMAIL PROTECTED] wrote: I'm using qmail 1.0.3 with the included qmail-pop3d. What's the best way on the server side to prevent passwords from being sent as clear text over the network for a pop3 session? I know users will be reluctant to change their mua's. So what can I do on my side?