On Fri, May 24, 2002 at 10:13:28PM -0500, dman wrote:

>     o   POP-before-SMTP
>         another authentication mechanism whereby the server requires
>         you to first access your POP box (and authenticate) and then
>         assumes that, for a short while, that same IP is still you
>         and will allow SMTP relaying
>         (I don't like this idea)

I've seen that setup before.  It's ugly and breaks things sometimes.  It
assumes that your mail client is also what's handling smtp and assumes
that it'll check the POP box before using smtp, and you won't disconnect
and immediately get someone else trying to find relays on the same IP.
This is security through stupid luck.

-- 
Baloo


Attachment: pgpxKYusudPPq.pgp
Description: PGP signature

Reply via email to