Re: sasl auth LOGIN / PLAIN

2017-09-02 Thread mj
On 09/02/2017 01:16 PM, Patrick Ben Koetter wrote: Mandatory STARTTLS*and* disallowing any shared-secret mechanism (CRAM-MD5, DIGEST-MD5, NTLM) is a clever move. This way you protect the identity while it is transported from the client to the server and you are able to store the passwords cry

Re: sasl auth LOGIN / PLAIN

2017-09-02 Thread Patrick Ben Koetter
* mj : > Hi, > > Ok, so disallowing LOGIN is not a clever move :-) Mandatory STARTTLS *and* disallowing any shared-secret mechanism (CRAM-MD5, DIGEST-MD5, NTLM) is a clever move. This way you protect the identity while it is transported from the client to the server and you are able to store the

Re: sasl auth LOGIN / PLAIN

2017-09-02 Thread mj
Hi, Ok, so disallowing LOGIN is not a clever move :-) Thanks for your answers! MJ On 09/02/2017 08:32 AM, Patrick Ben Koetter wrote: * postfix : On 09/01/2017 04:25 PM, mj wrote: Just a small question: we currently use posfix with sasl authentication, and folowing many docs, we have enabled

Re: sasl auth LOGIN / PLAIN

2017-09-01 Thread Patrick Ben Koetter
* postfix : > On 09/01/2017 04:25 PM, mj wrote: > > Just a small question: we currently use posfix with sasl authentication, > > and folowing many docs, we have enabled PLAIN and LOGIN authentication. > > > > However, googling leads me to believe that LOGIN is mostly used by > > Outlook Express, a

Re: sasl auth LOGIN / PLAIN

2017-09-01 Thread postfix
On 09/01/2017 04:25 PM, mj wrote: Hi, Just a small question: we currently use posfix with sasl authentication, and folowing many docs, we have enabled PLAIN and LOGIN authentication. However, googling leads me to believe that LOGIN is mostly used by Outlook Express, and that most (or all?) m

sasl auth LOGIN / PLAIN

2017-09-01 Thread mj
Hi, Just a small question: we currently use posfix with sasl authentication, and folowing many docs, we have enabled PLAIN and LOGIN authentication. However, googling leads me to believe that LOGIN is mostly used by Outlook Express, and that most (or all?) modern clients support the PLAIN me