On Mon, Jun 06, 2011 at 03:44:12PM +0300, gaby wrote: > If I use postfix with TLS (and courier-imap with TLS) the SASL > password and IMAP password are visibe in plain text?
There seems to be some confusion behind your question, so it's hard to know where to start. TLS encryption is implemented to prevent network sniffing of plaintext traffic. Offer void where taxed or prohibited by law, or where an attacker is placed as "man-in-the-middle". For details of Postfix and TLS, see here: http://www.postfix.org/TLS_README.html Whether or not a SASL password is transmitted in plaintext depends upon the mechanism used. And of course, as above, plaintext SASL mechanisms can (and should) be protected by TLS encryption. For details of Postfix and SASL, see here: http://www.postfix.org/SASL_README.html Postfix is not an IMAP server. You mentioned that you use courier-imap for that. Questions regarding courier-imap should be directed to an appropriate forum. (This one is not.) -- Offlist mail to this address is discarded unless "/dev/rob0" or "not-spam" is in Subject: header