On Mon, Jun 06, 2011 at 03:44:12PM +0300, gaby wrote:
> If I use postfix with TLS (and courier-imap with TLS) the SASL 
> password and IMAP password are visibe in plain text?

There seems to be some confusion behind your question, so it's 
hard to know where to start.

TLS encryption is implemented to prevent network sniffing of 
plaintext traffic. Offer void where taxed or prohibited by law, or 
where an attacker is placed as "man-in-the-middle". For details of 
Postfix and TLS, see here:
    http://www.postfix.org/TLS_README.html

Whether or not a SASL password is transmitted in plaintext depends 
upon the mechanism used. And of course, as above, plaintext SASL 
mechanisms can (and should) be protected by TLS encryption. For 
details of Postfix and SASL, see here:
    http://www.postfix.org/SASL_README.html

Postfix is not an IMAP server. You mentioned that you use 
courier-imap for that. Questions regarding courier-imap should be 
directed to an appropriate forum. (This one is not.)
-- 
    Offlist mail to this address is discarded unless
    "/dev/rob0" or "not-spam" is in Subject: header

Reply via email to