Re: fetchmail and plain text password



On Tue, Dec 29, 2009 at 08:03:53AM -0500, Robert Huff wrote:

Anton Shterenlikht writes:
> I'd be more worried that your password is sent as plaintext over
> the network using e.g. POP3. You should use the --ssl option if
> your mailserver allows it.

it looks like it doesn't allow ssl.

It is my understanding ISPs - at least those in the
U.S. oriented to the home user - rarely do, It's a non-trivial
amount of work to get working and then monitor for correct behavior
and possible breaches.

Agreed. Which is exactly why I like xs4all so much. :-) They do provide these
kinds of services.

But I would expect a university network (which I understand what the OP is
talking about) to offer something more sophisticated than plain POP3. I would
expect at least bSMTP. Bristol seems to have a computer science
department. That's at least a pool of warm bodies to train as sysadmins. :-P

Roland
--
R.F.Smith http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914 B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)

Attachment: pgpo17YW8wM2B.pgp
Description: PGP signature



Relevant Pages

  • Re: fetchmail and plain text password
    ... Anton Shterenlikht writes: ... > your mailserver allows it. ... it looks like it doesn't allow ssl. ... It is my understanding ISPs - at least those in the ...
    (freebsd-questions)
  • Re: fetchmail and plain text password
    ... Anton Shterenlikht writes: ... it looks like it doesn't allow ssl. ... It is my understanding ISPs - at least those in the ... But I would expect a university network (which I understand what the OP is ...
    (freebsd-questions)
  • Re: Google Secure Access
    ... Google then SENDS YOUR LOGIN DETAILS IN THE CLEAR TO YOUR ISP. ... Packetsniffing your login when you're using unsecured wireless is ... As far as SSL support goes - as far as I'm aware, ... provide SSL access to their mailservers (I run my own mailserver, ...
    (sci.crypt)
  • Re: Email aus ASP verschlüsselt übertragen
    ... ASP sendet Mails nicht direkt, sondern nutzt einen Mailserver. ... SMTP-Server kann IMHO kein SSL beim Senden. ...
    (microsoft.public.de.inetserver.iis.asp)
  • Re: unknown AUTHORIZATION state command in SuSE 9.0
    ... the SSL defaults if you're using IMAP is to obtain a copy (or recompile ... SuSE may have implemented ... I agree it's not ideal and putting together a mailserver on 8.2, ...
    (alt.os.linux.suse)