At 9:44 PM -0400 10/14/03, Charles Mangin imposed structure on a stream of electrons, yielding:
i keep setting up SIMS accounts for a bunch of folks that are all using either outlook or outlook express (i'm not certain which) and i've finally found that the reason none of them could see their mail was i had APOP set on their accounts.

so, i wonder, what clients do support APOP these days? i've always used it with eudora, and mail.app (i think) but it seems everybody else (read "outlook users") uses kerberos or ssl or md5, etc.

Just about everything not written by Microsoft supports APOP.


I have never run into the problem of no APOP support because I have the luxury of being able to make "DO NOT USE ANY MAIL SOFTWARE BY MICROSOFT!" my first and most vehement piece of advice, and anyone who refuses to follow it I take to be hopelessly ineducable.


and speaking of which, is there any way in sims, other than apop, to add that additional layer of security for clients that don't support it?


No.

However, you should be aware of the fact that applying high security to POP3 is a bit like putting a lock on a screen door. All that mail traveled in over the net in clear text, and for SIMS it will be going to the user in clear text. If someone wanted to snoop that mail and had access to the right wires to sniff out a password, doing so would be a needlessly indirect path. For SIMS that is slightly modified by the fact that the same password is used for SMTP relay authentication. Still, the issue of clear text passowrds need to be put in perspective: the only advantage of APOP is to prevent sniffing those passwords, but sniffing out even cleartext passwords has become increasingly difficult over the past few years as a growing number of networks move from plain hubs to switches and a shrinking number of ISP's and others run grossly insecure boxes with user access. Getting access to the right wires to sniff traffic on the modern net pretty much means cracking a router or physically cracking a network, i.e. adding an illicit device on the relevant wires.


--
Bill Cole [EMAIL PROTECTED]



############################################################# This message is sent to you because you are subscribed to the mailing list <[EMAIL PROTECTED]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>



Reply via email to