The "insecure" nature of POP3 is that the passwords, and data, are
sent in cleartext.  That means that if some ISP employee somewhere
happens to have a packet sniffer on at the exact time you check
your mail, he can grab your password.  Chances are pretty unlikely.
But...

I suppose a really geeky person could write a transparent POP3
proxy, which would grab and log your whole data stream going to/from
port 110.

I'd be much more concerned about weaknesses in your POP3 daemon,
like buffer overruns, and silly passwords.

Ed
-- 
Edward Schernau                         http://www.schernau.com
Network Architect                       mailto:[EMAIL PROTECTED]
Rational Computing                      Providence, RI, USA


-- 
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.

Reply via email to