On Thu, Feb 15, 2007 at 09:14:17PM -0500, John Peacock wrote:
> It's really better to use SMTP AUTH instead of SMTP after POP, since all 
> modern
> mail clients handle the former, it is more secure, and it doesn't require
> additional binaries (and bookkeeping).  You can even combine AUTH with TLS, so
> that your passwords don't pass over the Internet in clear text.
Seeing this mentioned again, I've been meaning to ask, does anybody have
a patch to allow the digest-style AUTH methods (those that do not
divulge a password and are replay-safe) before STARTTLS, and then all
AUTH methods after STARTTLS?

-- 
Robin Hugh Johnson
Gentoo Linux Developer
E-Mail     : [EMAIL PROTECTED]
GnuPG FP   : 11AC BA4F 4778 E3F6 E4ED  F38E B27B 944E 3488 4E85

Attachment: pgpVTebtYc4vK.pgp
Description: PGP signature

Reply via email to