Is it okay with your users for the contents of the email, and the login
and password, to be sent across the internet in plain text?
It's okay with users who know the extreme unlikelihood of anybody actually
making nefarious use of that information.
"Sniffers" are not easy to use, nor do many people know how to use them.
Phishing is a better way to steal email passwords, and, I would bet, the
way that 99.9% of such are actually stolen in real life.
We have used non-SSL email since forever, and have only had one password
stolen ever--and it was probably stolen by phishing.
The contention that "most" email providers require SSL may be true, but I
bet it is not true that it is required by the providers that "most people"
actually use.
Ken Dibble
www.stic-cil.org
_______________________________________________
Post Messages to: [email protected]
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message:
http://leafe.com/archives/byMID/profox/[email protected]
** All postings, unless explicitly stated otherwise, are the opinions of the
author, and do not constitute legal or medical advice. This statement is added
to the messages for those lawyers who are too stupid to see the obvious.
