Umm, I guess I'm not real sure that I understood that.
> AFAIK, APOP is just an authentication method whereby there is a shared > secret (the password) and the string showing the current time, etc. in the > POP server greeting. I understand what you're saying there. > These get concatenated and then hashed. ? You mean they get appended after each other (sorry, I couldn't for the life of me remember which function concatenate was), then encrypted in some way, or what? > The hash is sent over the network to the server. The server does the same > thing and if the hashes match the user's password is valid. So the SIMS box verifies the "encrypted"/hashed password and if valid, allows access. Wouldn't that tend to be more secure than leaving the other setting open? > So this would have no effect on how any of the other SIMS options work. Guess I'm still a little confused here. Sorry. Chris ############################################################# This message is sent to you because you are subscribed to the mailing list <[EMAIL PROTECTED]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
