On 24/07/12 14:29, Itamar Turner-Trauring wrote: > 3. The SMTP server's CRAM-MD5 implementation is buggy.
If I understand the issue correctly, this is the case. The server incorrectly advertises CRAM-MD5, but it never succeeds since the server lacks the relevant secret. Obviously this is bad, but apparently many GUI clients handle such broken servers, by falling back to PLAIN auth. I can't say I've ever seen it in the wild though. Although I haven't used it in a while, my recollection was that Twisted's SMTPClient implementation did a similar thing, and tried the auth methods it was supplied "in order". It may be that the OP is using some wrapper API or local code that is mis-using this functionality, or of course that I am mis-remembering it. _______________________________________________ Twisted-Python mailing list Twisted-Python@twistedmatrix.com http://twistedmatrix.com/cgi-bin/mailman/listinfo/twisted-python