Hello Peter,

Saturday, May 22, 2004, 6:34:03 PM, you wrote:

PP> Hello List,

PP> On Friday, May 21, 2004 at 5:21:36 PM [EMAIL PROTECTED] wrote (at
PP> least in part):

>>>>In the OLD days, people were happy with SMTP-Auth.  I consider it LESS
>>>>security as SMTP after POP, because with SMTP-Auth, You sent Your
>>>>e-mailadress and Your password of Your mailbox over the internet.
PP> [...]
>>> This is only true for SMTP Authentication of type "plain" and "login".

>>> With CRAM-MD5 its quite save.
PP> [...]
>> Yes, it's 'quite' safe, but You still reveal Your e-mailadress.
>> If there are many hops between Your workstation and the smtpserver,
>> You can get some spam in return.

PP> Well, as you are this enlightened you'll for sure be able to tell me
PP> the difference to POP authentication than, aren't you?
PP> I don't talk about the different protocol; but in my limited
PP> (inherited from my ancestors, which, as you stated, /pretended/ to be
PP> the most bright) mind and with a lot of ignorance I thought POP3 sends
PP> my username and pass as well. Using vpopmail for POP3 server the
PP> username will most the time be my e-mail-address; exactly the same you
PP> say it's insecure to send.

PP> But I'm pretty sure you'll be able to tell me where my mistake is
PP> located, because POP-b4-SMTP is, as you claimed yourself (see above),
PP> MUCH MORE secure than SMTP-AUTH.

>> More, Your mail is sent in plaintext.

PP> Why do you mix "authentication method" and "connection security"? It's
PP> two VERY different layers in communication model.
PP> The one is layer 3/4, the other is layer 7 in OSI model.

PP> There is NOTHING you can mix about them, there is NOTHING you can
PP> compare them on. It's like comparing apples and plants. The plant
PP> MIGHT be an apple tree, but you simply can't tell.

PP> So please stop whining, write a SMTP-over-SSL-HOWTO and be happy.

>> I prefer encrypted streams,

PP> You're free to do. But what's the relation to a SMTP-AUTH problem?

Before You make comments, first read the previous post.  I am talking
about TLS, smtps adn You are talking about pop3, complete out of the
road.  When I see word like 'enligtment' and I some sarcasm, seems You
are German either, see my previous comment.  Stop Your sarcasm, and
rebuild first Your country and mentality.

-- 
Best regards,
 DEBO Jurgen
 mailto:[EMAIL PROTECTED]

--------------------------------------------------------------------------------------------
                 www.guide.be * www.gids.be * www.guide.fr * www.shop.fr
--------------------------------------------------------------------------------------------
         / \         sarl GUIDE (sdet)
         ---         the GUIDE, de GIDS, TELESHOP, SHOP
     __   |   __     128, rue du faubourg de Douai  
    |  /  |  \  |    FR-59000 Lille, La France
     / \  |  / \     TÚl/Fax +32 59 26.91.51 Mobile +32 479 212.841
 /|______\|/______|\ Site    http://sarl.guide.fr
 \|      /|\      |/ N░ TVA  FR-55.440.243.988    
    |\ /  |  \ /|    RC Lille 74075/2001B01478
    |__\  |  /__|    Siret 440 243 988 00027
          |          Compte BE: KREDBEBB (BIC) BE56.466-5571951-88 (IBAN)              
                 
         ---         Compte FR: CMCIFR2A (BIC) FR76.1562-9027-0200-0455-1870-127 (IBAN)
         \ /         Conditions (terms): http://sarl.guide.fr/conditions.php  
--------------------------------------------------------------------------------------------
www.teleshop.fr * www.teleshop.be * www.teleshop.biz * www.teleshop.info * 
www.teleshop.name
--------------------------------------------------------------------------------------------

Reply via email to