Le 06/06/2011 14:44, gaby a écrit : > Hi > If I use postfix with TLS (and courier-imap with TLS) the SASL password and > IMAP password are visibe in plain text? >
No. the purpose of TLS is to encrypt traffic, including passwords. that said, you need to configure your TLS/SSL servers to only accept "non weak" exchanges. for example, only use SSL v3 and TLS v1 (and not SSL v2), for encryption, use keys with length > 100 and block length > 100 (whenever possible, use AES128), ... etc.
