Hi Peter,

> ?!? What login are you talking about? POP3-login for fetching your
> mail? Or IMAP?
> Yes, there is the possibility for TB! to use a more secure way, sadly
> the server has to support this kind of login. One would be 'APOP' an
> other would be 'MD5-CRAM'. Both are supported by TB! and IIRC SSL is
> being developed.

> The passwords are stored somehow encrypted within TB! but as long the
> the server only understands plain text passwords (which is the case if
> no APOP/CRAM is available) TB! has to decrypt before fetching your
> mail, otherwise the server would refuse your connection :-)

I'm talking about IMAP. On the same server, Netscape Messenger
4.78 talks to the server and no username/password is visible in
the packets it sends. Just plain IMAP with no special security.

Using TB, regardless of what I configure (MD5,...) TB sends the
username/password in the clear for every transaction with the
server!

I must be missing something?

-- 
Best regards,

Randy


-- 
________________________________________________________
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]
Unsubscribe: mailto:[EMAIL PROTECTED]
Latest Vers: 1.53d
FAQ        : http://faq.thebat.dutaint.com 

Reply via email to